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Recently, there has been much interest in a new kind of "unspeakable" quantum information 
that stands to regular quantum information in the same way that a direction in space or a mo- 
ment in time stands to a classical bit string: the former can only be encoded using particular 
degrees of freedom while the latter are indifferent to the physical nature of the information car- 
riers. The problem of correlating distant reference frames, of which aligning Cartesian axes and 
synchronizing clocks are important instances, is an example of a task that requires the exchange 
of unspeakable information and for which it is interesting to determine the fundamental quantum 
limit of efficiency. There have also been many investigations into the information theory that is 
appropriate for parties that lack reference frames or that lack correlation between their reference 
frames, restrictions that result in global and local superselection rules. In the presence of these, 
quantum unspeakable information becomes a new kind of resource that can be manipulated, de- 
pleted, quantified, etcetera. Methods have also been developed to contend with these restrictions 
using relational encodings, particularly in the context of computation, cryptography, communica- 
tion, and the manipulation of entanglement. This article reviews the role of reference frames and 
superselection rules in the theory of quantum information processing. 
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I. INTRODUCTION - WHY CONSIDER REFERENCE 
FRAMES IN QUANTUM INFORMATION? 

Classical information theory is typically concerned 
with fungible information, that is, information for which 
the means of encoding is not important. Shannon's cod- 
ing theorems, for instance, are indifferent to whether the 
two values "0" and "1" of a classical bit correspond to 
two values of magnetization on a tape, two voltages on 
a transmission line, or two positions of a bead on an 
abacus. Most information-processing tasks of interest to 
computer scientists and information theorists are of this 
sort, whether they be communication tasks such as data 
compression, cryptographic tasks such as key distribu- 
tion, or computational tasks such as factoring. Nonethe- 
less, there are many tasks that cannot be achieved with 
fungible information but that are also aptly described 
as "information processing" tasks. Examples include the 
synchronization of distant clocks, the alignment of dis- 
tant Cartesian frames, and the determination of one's 
global position. Imagine for instance that Alice and Bob 
are in separate spaceships with no shared Cartesian frame 
(in particular, no access to the fixed stars). There is 
clearly no way for Alice to describe a direction in space 
to Bob abstractly, that is, using nothing more than a 
string of classical bits. Rather, she must send to Bob a 
system that can point in some direction, a token of one 
of the axes of her own Cartesian frame. This token can- 
not be spherically symmetric; it must have a degree of 
freedom that can encode directional information. On the 
other hand, if she wishes to synchronize her clock with 
Bob's by sending him a token system, she will need to 
make use of a system that has a natural oscillation. The 
information that is communicated in these sorts of tasks 
is said to be nonfungible. These two sorts of information, 
fungible and nonfungible, have also been referred to as 
speakable and unspeakable (Peres and Scudo, 2002b). 

The relatively young field of quantum information 
theory has been primarily concerned with developing 
a quantum theory of speakable information. Investi- 
gators have sought to determine the degree of success 
with which various abstract information-processing tasks 
can be achieved assuming that the systems used to im- 
plement these tasks obey the laws of quantum theory. 
Nonetheless, there has also been progress in developing 
a quantum theory of unspeakable information, outlining, 
for instance, the success with which tasks such as clock 
synchronization and Cartesian frame alignment can be 
achieved in a quantum world. 

That one must look to physics to answer questions of 
interest to computer scientists is a fact that has not al- 
ways been obvious. (Landaucr (1993) summarized this 
point in the slogan, "Information is physical".) That one 
must look to physics to answers questions about the pro- 
cessing of unspeakable information, on the other hand, 
comes as no surprise. Nonetheless, the quantum theory 
of unspeakable information is only just beginning to be 
explored. 



It is critical to note that when one has a system encod- 
ing directional information, such as a spin- 1/2 particle in 
a pure state, the direction is not defined with respect 
to any purported absolute Newtonian space, but rather 
with respect to another system, for instance, a set of 
gyroscopes in the laboratory. Similarly, a system that 
contains phase information, such as a two-level atom in 
a coherent superposition of ground and excited states, is 
not defined relative to any purported absolute time, but 
rather relative to a clock. We refer to the systems with 
respect to which unspeakable/nonfungible information is 
defined, clocks, gyroscopes, metre sticks and so forth, as 
reference frames. The tasks we have highlighted thus far 
can all be described as the alignment of reference frames. 
Nonfungible information is nonfungible precisely because 
it can only be defined with respect to a particular type 
of reference frame. 

Even a quantum information theorist who is uninter- 
ested in tasks such as clock synchronization and Carte- 
sian frame alignment must necessarily consider physical 
systems which make use of reference frames. The reason 
is that although fungible information can be encoded into 
any degree of freedom, and thus defined with respect to 
any reference frame, it is still the case that some degree 
of freedom must be chosen, and consequently some refer- 
ence frame is required. For instance, if a two-level atomic 
qubit is being used for some task, one still requires a clock 
in the background in order to implement arbitrary prepa- 
rations and measurements on this qubit even if the task 
is to perform abstract quantum information-processing 
rather than as a means of distributing phase informa- 
tion. In this example, one can change the relative phase 
between the ground and excited states of a two-level atom 
by a specified amount by turning on a static electric field 
for a specific time interval, but this requires a suitably 
precise clock as well as alignment of the field with the 
atomic dipole moment. 

It follows that to lack a reference frame for a particu- 
lar degree of freedom has an impact on the success with 
which one can perform certain quantum information pro- 
cessing tasks. On several occasions there has been consid- 
erable controversy over the performance of certain tasks 
because this impact was ignored, or not treated properly 
As we will see, the lack of a reference frame can be treated 
within the quantum formalism as a form of decoherence - 
quantum noise. As opposed to the typical source of deco- 
herence, which is due to correlation with an environment 
to which one does not have access, this decoherence can 
be viewed as resulting from correlation with a (possibly 
hypothetical) reference frame to which one does not have 
access. This is a powerful result, because if the lack of a 
reference frame can be viewed as a form of decoherence, 
the now-standard techniques of combating decoherence 
in quantum information theory (in particular, the use of 
decoherence-free subsystems) can be applied. 

As it turns out, the restriction of lacking a reference 
frame is mathematically equivalent to that of so-called 
supers election rules - postulated rules forbidding the 
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preparation of quantum states that exhibit coherence be- 
tween eigenstates of certain observables. Originally, su- 
perselection rules were introduced to enforce additional 
constraints to quantum theory beyond the well-studied 
constraints of selection rules (conservation laws). They 
were considered to be axiomatic restrictions, applying 
to only certain degrees of freedom. For instance, a su- 
perselection rule for electric charge asserts the impossi- 
bility of preparing a coherent superposition of different 
charge eigenstates. As we shall see, however, for superse- 
lection rules associated with compact symmetry groups, 
the presence of appropriate reference frames can actually 
allow for the preparation of such superposition states, 
thereby obviating the superselection rules in practice. 
This shows that there is an intimate connection between 
the restriction of lacking a reference frame and that of a 
superselection rule. 

As Schumacher (2003) has emphasized, interesting re- 
strictions on experimental operations yield interesting in- 
formation theories. For instance, the fact that classical 
channels and local operations are a cheap resource com- 
pared to quantum channels leads us to study what can 
be achieved with local operations and classical communi- 
cation (LOCC). The resulting information theory is the 
theory of entanglement. As another example, the relative 
ease with which one can implement Gaussian operations 
in quantum optics leads one to consider the information 
theory that results from the restriction to these oper- 
ations. By comparing and contrasting the information 
theories that result from various different restrictions we 
are led to a much broader perspective on all of them. In 
particular, analogies between the resulting theories allow 
us to apply the insights gained in the context of one to 
solve problems arising in the context of another. In this 
sense, studying the restriction of a superselection rule - 
or equivalently, as we shall demonstrate, the restriction 
of lacking a reference frame - may yield lessons for the 
rest of quantum information theory. 

In some cases, it is difficult to imagine lacking a refer- 
ence frame. For example, Cartesian frames with precision 
on the order of fractions of a degree and clocks with preci- 
sion on the order of fractions of a second are sufficiently 
ubiquitous that their presence typically does not even 
warrant mention. However, these same reference frames 
become quite difficult to prepare and maintain if one re- 
quires very high precision or very good stability. Further- 
more, there are certain kinds of reference frames that are 
difficult to prepare even if one requires only low precision 
and poor stability. For instance, a Bose-Einstein conden- 
sate of alkali atoms can act as a reference frame for the 
phase that is conjugate to atom number, and the reli- 
able preparation of these has only been achieved in the 
past decade. In addition, it is straightforward to imagine 
two parties with reference frames that are uncorrclatcd 
(such as the example of the space-faring Alice and Bob 
provided earlier). In this case we say that they lack a 
shared reference frame. All of these facts demonstrate 
that reference frames must be considered as resources. 



Regardless of the degree of freedom in question, a ref- 
erence frame is always associated with some physical sys- 
tem. As such, it may be treated within the formalism of 
quantum mechanics. In this case, we speak of quantum 
reference frames. Indeed, one can imagine an extreme 
case wherein the only system in a party's possession that 
plays the role of a reference frame (or plays the role of a 
shared reference frame with another party) is of bounded 
size. For instance, one can imagine a quantum clock con- 
sisting of an oscillator with a small maximum number of 
excitations, or a quantum gyroscope consisting of a hand- 
ful of spin-1/2 systems. It is then natural to ask how 
well such a bounded-size reference frame approximates 
one that is of unbounded size. 

The ability of a bounded reference frame to stand in for 
an unbounded reference frame is analogous to the ability 
of an entangled state to stand in for the possibility of im- 
plementing non-local operations. Recall that the telepor- 
tation protocol permits entanglement and classical com- 
munication to substitute for a non-local operation. More 
generally when one lacks the ability to perform non-local 
operations (such as when qubits are remotely separated) , 
entanglement becomes a quantifiable resource. Similarly 
when one is subject to a superselection rule (i.e., when 
one lacks a reference frame for some degree of freedom) 
bounded reference frames become a quantifiable resource 
about which we can ask the same sorts of questions as 
we do for entanglement. For instance, we may ask the 
following questions: Which states are interconvertible? 
How many states of a standard form can be distilled from 
a given state and how many are required to form a given 
state? How much of the resource is required for a given 
task? How quickly is it used up? etc. 

Finally, because it is all too easy to forget about the 
presence of reference frames, these are at the root of var- 
ious conceptual confusions. These include: the interpre- 
tation of quantum states exhibiting coherence between 
number states in a single mode (a subject of controversy 
in quantum optics, Bose-Einstein condensation and su- 
perconductivity); the quantification of entanglement in 
systems of bosons or fermions, or in situations when op- 
erations are restricted; the efficiency with which frames 
may be aligned, clocks synchronized, etc.; and the signif- 
icance of superselection rules on the possibility of imple- 
menting various quantum information processing tasks. 

In this article, we provide a review of the recent in- 
vestigations into these and related issues. In Sec. II, wc 
introduce the formalism for treating the lack of a gen- 
eral reference frame in quantum theory, and show how 
this is equivalent to a superselection rule. Sec. Ill con- 
siders quantum information processing without a shared 
reference frame. Sec. IV considers how to treat reference 
frames within the quantum formalism, which provides 
the starting point for a theory of distributing quantum 
reference frames - the topic of Sec. V. The effect of 
bounding the size of reference frames for quantum infor- 
mation processing is considered in Sec. VI. Finally, we 
provide an outlook to the future of this field in Sec. VII. 
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II. FORMALIZING REFERENCE FRAMES AND 
SUPERSELECTION RULES 

A. Reference frames in quantum theory 

Reference frames (RFs) are implicit in the definition of 
quantum states. For example, in the position represen- 
tation of the wavefunction of a quantum particle, ip{x), 
x parameterizes the position of the particle relative to 
a spatial reference frame. More generally, the quantum 
state of a system is a description of the system relative 
to a suitable reference frame. 

Consider a quantum system with Hilbert space H, pre- 
pared in a state \tpo) relative to a reference frame. We can 
now consider a transformation that changes this relation. 
Such a transformation can be active, changing the system 
such that it subsequently holds a different relation to the 
reference frame, or passive, in which case the system is 
unchanged but is now described relative to a new refer- 
ence frame. In both situations, the transformation can 
be represented by a unitary operator, T(g), where g de- 
notes the transformation; the transformed system is then 
described by the state T(g)\tpo)- Note that these opera- 
tions can be composed, so that T(g'g) = T(g')T(g) is a 
transformation if both T(g') and T{g) are, and this com- 
position is associative (i.e., T(g"g')T(g) = T(g")T(g'g)). 
Also, there exists an inverse transformation T(g _1 ) to 
every transformation T(g), such that T(g^ 1 )T(g) = I, 
the identity. If this inverse is unique, 1 the set of all trans- 
formations form a group G. We use g £ G to denote an 
abstract transformation within the group, and say that 
T is the unitary representation of this group on the quan- 
tum system (or equivalcntly, on the Hilbert space H). 

In this review, we will often use two common exam- 
ples of a reference frame to illustrate the concepts and 
ideas we cover. The first example is a phase reference, 
for which the relevant group of transformations is U(l), 
the group of real numbers modulo 2ir under addition. A 
representation of U(l) on a quantum system determines 
how that system transforms under phase shifts. The 
second example that we use extensively in this review 
is a Cartesian frame specifying three orthogonal spatial 
directions; the group of transformations of orientation 
relative to a Cartesian frame is the group of rotations 
SO (3). An element il E SO (3) can be given, say, by a 
set of three Euler angles. The representation of SO (3) 
on a quantum system, then, determines how that system 
transforms under rotations; for example, a spin-j particle 
transforms according to the unitary representation Rj (a 
Wigner rotation matrix). We will often extend the group 
of rotations SO(3) to the group SU(2) to allow for spinor 



1 If the inverse is not unique, then the RF is instead associated 
with a coset space. This situation occurs when the RF itself is 
invariant under some transformations. We consider an example 
of such an RF - a direction (as opposed to a full Cartesian frame) 
- in Sec. V. 



representations. 

Because group theory provides a powerful mathemati- 
cal tool for analyzing the role of reference frames in quan- 
tum systems, we will make frequent use of group theoretic 
techniques throughout this review. We present a short 
introduction to the relevant techniques in this section, 
but the reader may wish to consult a standard group 
theory text, such as Fulton and Harris (1991) or Stern- 
berg (1994), for further details. Also, for an introduction 
to the standard mathematical techniques of quantum in- 
formation, we direct the reader to Nielsen and Chuang 
(2000). 

We begin by exploring an illustrative example. 

B. Lacking a phase reference implies a photon-number 
superselection rule 

In this section, we investigate an explicit example of a 
reference frame - a phase reference - and demonstrate 
that if one lacks a phase reference then the resulting 
quantum theory is equivalent to one in which there is 
a superselection rule for photon number. 

In quantum optical experiments, states of an optical 
mode are always referred to some phase reference. Con- 
sider K optical modes as described by some party, Alice, 
relative to a phase reference in her possession - for exam- 
ple, a high intensity laser. Let \n\, . . . , nx) be the Fock 
state basis for the Hilbert space describing these 

modes, with the number of photons in the mode i, 
and Ni the number operator for this mode. 

Consider another party, Charlie, who has a different 
phase reference. Let (f> be the angle that relates Char- 
lie's phase reference to Alice's. Alice can perform an 
active transformation on her system of optical modes 
by allowing them to evolve under a Hamiltonian pro- 
portional to N tot = J2iLi ^ii the total photon num- 
ber operator. Specifically, the unitary transformation 
U((j)) = exp(icf>Ntot) will actively advance her system by 
an angle <j>. Using the equivalence between the represen- 
tations for active and passive transformations, we thus 
conclude that states prepared by Alice are represented 
by Charlie relative to his phase reference by performing 
a passive transformation of 4>, using the representation U 
of U(l) on K modes given by U((f) = exp(z0A to t). If 1^) 
is the state relative to Alice's phase reference, then this 
same state relative to Charlie's phase reference is given 
by the transformed state 

U{<t>)\il)) = e^ tot |^). (2.1) 

For example, let Alice prepare the single-mode coher- 
ent state 

oo n 

H^Vcnln), c„EEe-H 2 /2 " , (2.2) 
n =o 

with aeC; this state has a phase arg(a) relative to Al- 
ice's phase reference. Charlie would describe this same 
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state relative to his phase reference by a coherent state 
with the same amplitude but with phase arg(a) + <f>. This 
passive transformation agrees with that of Eq. (2.1) be- 
cause 
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a) = 



a) 



(2.3) 



where N is the number operator on this single mode. 

As another example, let Alice prepare the two-mode 
state ( 1 01) + |10))/\/2. Because this state is an eigen- 
state of iVtot> the transformation U((f>) induces only an 
unobservable overall phase when acting on this state. 
Thus, Charlie also represents the state of the system as 
(| 01) + 1 10)) /v^2 relative to his phase reference. This 
two-mode state is an example of an invariant state; it is 
defined independently of any phase reference. 

It will be useful for us to decompose the Hilbert space 
of K modes into subspaces that transform in a sim- 
ple way under the action of the group U(l), as follows. 
Defining H n to be the Hilbert space consisting of states of 
K modes with precisely n total photons, i.e., eigenspaces 
of Atot with eigenvalue n, we can express the Hilbert 
space as a direct sum 



(2.4) 



n=0 



Any state \ip n ) G T~t n transforms under phase shifts, i.e., 
under the representation U of U(l), as 

U(<f>)\il> n ) = e^n) , |«£H„. (2.5) 

Define H n to be the projector onto H n . Then an arbitrary 
state \ip) G H( K ) transforms as 



[/(0M = £e^n„ 



(2.6) 



Now consider the situation where Charlie has no 
knowledge of the angle <f) that relates his phase refer- 
ences to Alice's, i.e., the laser serving as his phase ref- 
erence is not phase-locked to hers. 2 Let Alice prepare a 
quantum state of K modes relative to her phase ref- 
erence. Given that <f> is completely unknown, one must 
average over its possible values to obtain the state rela- 
tive to Charlie. This averaging yields the mixed state 



U 



2tt 



(2.7) 



2 It should be noted that if the phase between Alice and Char- 
lie's references is changing in time in a known manner, then the 
transformation relating their descriptions is still of the form of 
Eq. (2.1) but with <f> a function of time. Given that this function 
is known, the parties can compensate for this effect. However, a 
lack of knowledge of how this phase is changing, for instance, an 
unknown drift, can eventually lead to Alice and Charlie having 
no information about the relative phase between their references. 
In such a situation, the timescale of the drift relative to the op- 
erations they perform is critical; a slow drift may have negligible 
effect on a quick protocol. 
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Using Eq. (2.6) yields 

u[\mi>\}= r^^e^mm 

" n,n' 
n,n' " 

= ^n„|v>XV|n n . 



(2.8) 



Because this result applies to any state we can ex- 
press the action of U on an arbitrary density operator p 
as 



(2.9) 



The map U removes all coherence between states of dif- 
fering total photon number on Alice's systems. It follows 
in particular that U[p] is invariant under phase shifts, 



[U[p},U(<j>)] = 0, v 



(2.10) 



Thus, if states are described relative to Charlie's phase 
reference, Alice faces a restriction in what she can pre- 
pare. This restriction is characterized by the quantum 
operation U, which ensures that Charlie will describe any 
state prepared by Alice as block-diagonal in total photon 
number, or equivalently, as invariant under phase shifts. 
We note in particular that the only pure states that Alice 
can prepare are those which lie entirely within a single 
eigenspace Ji n . 

Now consider the related question for operations: If 
a unitary operation V is performed by Alice relative to 
her phase reference, how is this operation described by 
Charlie relative to his phase reference? Let a be the 
state of the system relative to Charlie's phase reference. 
To describe the action of V on this state if the angle <fi 
that relates Charlie's phase reference to Alice's is known, 
Charlie could transform this state into Alice's frame, then 
apply the unitary V, then transform back to his frame; 
the resulting state is 



U{cj))VU{(j)) ] aU{(j))V^ U(<f>) 



t 



(2.11) 



relative to Charlie. Thus, the operation is described by 
Charlie by the unitary = U((f>)VU((j))^ . If the phase 
4> is unknown, then Charlie would instead describe the 
operation by an incoherent mixture of unitaries of this 
form, i.e., by the map 



27T 



Jiu^VUi^aU^Ui^. (2.12) 



A notable special case is if the system was prepared by 
Alice, so that the state a relative to Charlie's RF is of 
the form a = U[p] as in Eq. (2.9). In this case, 



V[ct] = U[VaV^], 



(2.13) 
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so that V[tr] is also block-diagonal in total photon num- 
ber. Thus, if operations are described relative to Char- 
lie's phase reference, then Alice experiences a restriction 
on what operations she can perform. 

We note that a restriction that requires states to be 
block-diagonal in the eigenspaces of some operator is 
common in quantum theory: it is formally equivalent 
to a supers election rule (SSR) (Giulini, 1996). Many 
superselection rules in non-relativistic quantum theory, 
such as the superselection rule for charge (Wick et at, 
1952), are characterized by an inability to prepare states 
with coherence between eigenspaces of some "charge op- 
erator" corresponding to different eigenvalues. Thus, we 
can refer to the restriction described above as a super- 
selection rule for photon number (Sanders et al., 2003). 
Alice cannot prepare, say, a coherent state \a) relative to 
Charlie's phase reference, but she can prepare a phase- 
invariant state such as (|01) + \10))/y/2. In addition, she 
cannot perform the unitary displacement operation that 
takes the vacuum |0) to a coherent state \a), but she can 
perform any unitary operation on the two-dimensional 
subspace spanned by |01) and |10). 

We note that in the present context the SSR only re- 
stricts preparations and operations by Alice (or any party 
who does not share Charlie's phase reference). The SSR 
does not forbid states with coherence between different 
total photon-number eigenstates from existing within the 
theory, and in particular, Charlie (or any party who does 
share Charlie's phase reference) experiences no such re- 
striction on what states he can prepare. Thus, it makes 
sense within this context to consider what manipulations 
Alice can perform under the restriction of an SSR on gen- 
eral (possibly coherent) states. For example, Alice can 
perform the relative phase shift which takes the state 
(|0) + |1))/V2 to (|0) - |1))/V2. Also, we note that Alice 
is able to (incoherently) change the total photon number, 
i.e., she can perform an operation that maps the vacuum 
|0) to the single-photon state |1). Thus, this restriction is 
not equivalent to a conservation law for photon number. 



C. A general framework for reference frames and 
superselection rules 

In this section, we consider how to generalize the basic 
idea of the previous section - that lacking a reference 
frame leads to a superselection rule - beyond the case of 
a phase reference. We present some formal mathematical 
tools, in particular, tools from group theory and linear 
algebra, that we will use throughout this review paper. 

Suppose two parties, Alice and Charlie, are consid- 
ering a single quantum system described by a Hilbcrt 
space TL. Let this system transform via a group G rel- 
ative to some reference frame. Throughout this review, 
we will consider both finite groups and continuous (Lie) 
groups. For the latter, we will restrict our attention to 
Lie groups that (i) are compact, so that they possess a 
group-invariant (Haar) measure dg; and (ii) act on TL via 



a unitary representation T, ensuring that they are com- 
pletely reducible (Sternberg, 1994). Many of the tech- 
niques in this review can be applied to other groups with 
some modification, but there are many technical difficul- 
ties which are beyond the scope of this review. 

Let g £ G be the group element relating Charlie's refer- 
ence frame to Alice's, i.e., the element in G that describes 
the passive transformation from Alice's to Charlie's ref- 
erence frame. Furthermore, suppose that g is completely 
unknown, i.e., that Alice's reference frame and Charlie's 
are uncorrelated. It follows that if Alice prepares a state 
p on TL relative to her frame, the state of the system is 
represented relative to Charlie's frame by the state 3 

p = f &gT{g)pT\g) 
Jg 

= Q\P\ , (2-14) 

with T(g) a unitary representation of g on TL, and dg the 
group-invariant (Haar) measure. 4 We call the operation 
Q the "G-twirling" operation. If we choose to always 
represent preparations by Alice relative to the reference 
frame of Charlie, then all states are of the form p = Q[p]. 
Any p of this form satisfies 

[p,T(g)}=0, VgeG. (2.15) 

and thus is said to be G -invariant. The proof follows from 
the fact that T(g)pTHg) = J G dg' T(gg')pT^gg') = p. 

Let B{TL) denote the set of all bounded operators on TL. 
Given that B(TL) forms a Hilbert space under the Hilbcrt- 
Schmidt inner product (a, r) = Tr (cpt), linear maps can 
be regarded as operators acting on B(TL). These are 
called super operators to distinguish them from operators 
acting on TL. It is useful to define the superoperator T{g) 
by T(g)[p\ = T(g)pT^(g), which is the unitary represen- 
tation of G on B(TL). We may then express Q simply as 
^ = / G dffT( 5 ) ; 

We now consider the representation of transformations. 
The most general transformation upon a quantum sys- 
tem, i.e., the most general quantum operation, is repre- 
sented by a completely positivity-preserving superopera- 
tor £ : B(TL) -> B(TL). (Sec Nielsen and Chuang (2000) 
for the definition and properties of these supcropcrators.) 
The question of interest to us is the following: if an op- 
eration is represented by the superoperator £ relative to 
Alice's frame, how is this same operation represented rel- 
ative to Charlie's frame? Generalizing the justification 
given for Eq. (2.12) in the case of a phase reference, we 



The invariant measure is chosen using the maximum entropy 
principle: because Charlie has no prior knowledge about Alice's 
reference frame, he should assume a uniform measure over all 
possibilities. 

4 If the group G is instead a finite group, this expression is 
GfiniteM = E 96 G T (9)pTHg)- In the following, we use 

the Lie group notation exclusively; however, all results apply 
equally well to finite groups. 
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conclude that relative to Charlie's frame the operation is 
represented by the superoperator £, where 

£[p) = f &gT{g)£[T\g) P T{g)]T\g), (2.16) 

JG 

or, equivalently, 

£ = f dgT(g)o£oT(g- 1 ), (2.17) 
Jg 

where .AoSfp] = .4 [£?[/?]]. Given that T{g) is a representa- 
tion of G on B(H), Eq. (2.17) has the form of Eq. (2.14) 
except with operators replaced by superoperators. We 
therefore refer to the map taking £ to £ as "super-G- 
twirling" . Any superoperator of the form of £ satisfies 

[£,T(g)} = 0, VjeG, (2.18) 

where [A,B] = A o B — B o A is the superoperator com- 
mutator. Thus, £ is invariant under the action of G; it 
is a G-invariant operation. 

The superoperator £ acts on a G-invariant operator A 

as 

£[A}= f dgT(g)o£oT(g- 1 )[g[A]] 
Jg 

= f AgT{g)o£ oQ[A] 
Jg 

= G°£°G[A], (2.19) 

where we have used the fact that A = G[A) and T(g~ 1 )o 

g = q. 

Every completely positivity-preserving superoperator 
admits an operator-sum decomposition of the form 
£[p\ = AkpAt where the Ak are called Kraus op- 
erators. Clearly, a sufficient condition for an operation £ 
to be a G-invariant operation is for all of its Kraus opera- 
tors Ak to be G-invariant operators. In general, however, 
this is not a necessary condition. Note, in particular, 
that if V is a unitary operator that is G-invariant, then 
V[-] = V(-)Vt is a G-invariant superoperator and the 
associated unitary transformation can be implemented 
without an RF. Nonetheless, there may exist G-invariant 
superoperators arising from G-noninvariant unitary op- 
erators. 

Finally, we consider the representation of measure- 
ments. The most general measurement on a quantum 
system is represented by a set of completely positivity- 
preserving superoperators {£k}, the sum of which is 
trace-preserving. The probability of outcome k for the 
measurement is pk = Tr(£fc[p]) and upon obtaining this 
outcome, p is updated to £k[p]/Pk- The probability 
of outcome k may also be specified by pk = Ti(Ekp) 
where the set {Ek} is a positive operator valued mea- 
sure (POVM) (defined by the conditions E k > and 
Y,k E k = I)- The POVM {E k } that is associated with 
a measurement is obtained from the set of superoper- 
ators {£k\ associated with it by Ek = £ k [I], where 



the adjoint of a superoperator is defined relative to the 
Hilbcrt-Schmidt inner product on the operator space, 
Tr(£ t (<j) T ) =Tr(<7£(r)). 

Recalling how operations transform under a change of 
reference frame, if a measurement is represented by the 
set of superoperators {£k} relative to Alice's frame, then 
it is represented by the set of superoperators {£k} relative 
to Charlie's, where £k is given by Eq. (2.17). Taking 
the superoperator adjoint of Eq. (2.17), and using the 
fact that E k = £[[1], it follows that the POVM {E k } 
relative to Alice's frame is represented by the POVM 
{Ek} relative to Charlie's frame where 

Ek = G[Ek] . (2.20) 

It follows that 

[E k ,T(g)} = 0, V.geG, (2.21) 

that is, the POVM {E k } is G-invariant. 

Thus, relative to Charlie's reference frame, the prepa- 
rations, operations and measurements that Alice can im- 
plement are represented by states, superoperators and 
POVMs of the form of (2.14), (2.17), and (2.20), respec- 
tively. We now demonstrate that this restriction has the 
same mathematical characterization as that of a supers- 
election rule for a (possibly non-Abelian) group G. 

First, we note that the representation T of the group 
G allows for a decomposition of the Hilbert space into 
charge sectors H q , labeled by an index q, as 

« = (2-22) 

where each charge sector carries an inequivalent repre- 
sentation T q of G. In the U(l) phase reference exam- 
ple presented above, the charge sectors corresponded to 
eigenspaces of total photon number. Each sector can be 
further decomposed into a tensor product, 

H q = M q ®N q , (2.23) 

of a subsystem A4 q carrying an irreducible representa- 
tion (irrep) T q of G and a subsystem Af q carrying a trivial 
representation of G. (Recall that a representation acts ir- 
rcducibly on a space if there are no invariant subspaces.) 
Note that this tensor product does not correspond to the 
standard tensor product obtained by combining multiple 
qubits: it is virtual (Zanardi, 2001). The spaces M q and 
M q are therefore virtual subsystems. The M. q and Af q are 
sometimes referred to as gauge spaces and multiplicity 
spaces respectively. 5 For the U(l) phase reference ex- 
ample, the subsystems A4 q are one-dimensional, and so 
the additional tensor product structure within the irreps 



5 In high energy physics, the Ai q are called colour spaces and the 
J\T q arc called flavour spaces. 
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is not required; for a general superselection rule corre- 
sponding to a non-Abelian group G, however, they can 
be non-trivial. 

Expressed in terms of this decomposition of the Hilbcrt 
space, the map Q takes a particularly simple form. Be- 
cause of the broad utility of this form, we present it as a 
theorem. 

Theorem. The action ofQ in terms of the decomposition 
n = ($)M q ®JV q , (2.24) 

is given by 

g = Y,{V Mq ®lN q )°V q , (2.25) 

9 

where V q is the superoperator associated with projection 
into the charge sector q, that is, V q [p] = H q pTL q with 
H q the projection onto H q = M. q ® M q , T>m denotes 
the trace-preserving operation that takes every operator 
on the Hilbert space M to a constant times the identity 
operator on that space, and Xv denotes the identity map 
over operators in the space N ' ■ 

We provide a short proof of this theorem at the end of 
this section. 

Note that the operation Q has the general form of de- 
coherence. Whereas decoherence typically describes cor- 
relation with an environment to which one does not have 
access, in this case the decoherence describes correla- 
tion to a reference frame to which one does not have 
access. Given that Q acts as identity on subsystems 
J\f q , these subsystems are called decoherence- free subsys- 
tems (also known as noiseless subsystems) (Knill et al, 
2000; Zanardi and Rasetti, 1997). In stark contrast, 
Q acts as the completely depolarizing operation on the 
subsystems M q ; these are called decoherence- full subsys- 
tems (Bartlett et al, 2004a). 

It follows, in particular, that a G-invariant operator 
A = Q{A) must have the form 

A = ®I Mq ®A Nq , (2.26) 
<? 

where the Im 9 are identity operators on the subsystems 
M. q and the Ajj are arbitrary operators on the subsys- 
tems M q . 

We are now in a position to see how the restriction of 
lacking a reference frame for the group G is equivalent 
to the standard notion of a superselection rule associated 
with this group. Superselection rules are most commonly 
discussed in the context of Abelian groups where they can 
be described simply as a restriction of the physical states 
and observables to those that are block-diagonal with re- 
spect to the inequivalent representations of G (Giulini, 
1996). (Occasionally, this restriction is argued to hold 
for the observables alone, but in this case every state 



that is not restricted in this way is operationally indis- 
tinguishable from a state that is, so one may as well as- 
sume this restriction for the states also.) The standard 
notion of a superselection rule for an arbitrary (possi- 
bly non-Abelian) group G is a restriction of the physi- 
cal states and observables to those that commute with 
every element of G (Giulini, 1996). This restriction on 
states is precisely what is asserted in Eq. (2.15), and 
the restriction on observables is simply Eq. (2.21) ap- 
plied to the special case of a projective measurement. 
The restriction on transformations has traditionally only 
been articulated for unitary transformations and asserts 
that only G-invariant Hamiltonians arc physical. This 
is equivalent to asserting that the unitary itself be G- 
invariant, and such unitaries were identified above as the 
only ones that can be achieved when lacking an RF for 
the group G. Eq. (2.18) is a generalization of this restric- 
tion to irreversible transformations. Thus, one can view 
the restrictions of Eqs. (2.15), (2.18) and (2.21) as the 
formalization of the restrictions of a superselection rule 
associated with the group G in the language of quantum 
information theory. We shall say that the restriction due 
to the lack of a reference frame for G is equivalent to a 
superselection rule associated with the group G. 

We note that although the term "superselection rule" 
was initially introduced to describe an axiomatic re- 
striction on quantum states, observables, and opera- 
tions (Wick et al, 1952), it has been emphasized by 
Aharonov and Susskind (1967) that whether or not co- 
herent superpositions of a particular observable are pos- 
sible is a practical matter, depending on the availability 
of a suitable reference system. We return to this issue in 
Sec. IV. 

Finally, although we have thus far mentioned only the 
two limiting possibilities for the correlations that might 
hold between Alice and Charlie's reference frames - com- 
pletely correlated or completely uncorrelated - in gen- 
eral one might wish to consider the intermediate sce- 
nario wherein they are partially correlated. To model 
this, one replaces the uniform Haar measure appearing 
in Eq. (2.14) with the non-uniform measure that charac- 
terizes Charlie's partial knowledge of the group element g 
in order to obtain a weighted G-twirling operation. Like 
G-twirling, this operation is noiseless on the multiplicity 
spaces, but unlike G-twirling, which is completely de- 
cohering on the gauge spaces, the weighted G-twirling 
operation is only partially decohering on these spaces. 

Proof of Theorem 1. Our proof, which follows Nielsen 
(2003), will make use of two central theorems of group 
representation theory known as Schur's Lemmas. We 
state these lemmas here without proof. 

Lemma (Schur's first). If T{g) is an irreducible repre- 
sentation of the group G on the Hilbert space H, then any 
operator A satisfying T(g)AT^ (g) = A for all g e G is a 
multiple of the identity on H. 
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Lemma (Schur's second). If T\{g) and T2(g) are in- 
equivalent representations of G, then Ti(g)AT^(g) = A 
for all g e G implies A = 0. 

We begin by decomposing the representation T{g) ap- 
pearing in Eq. (2.14) into a sum of irreducible represen- 
tations, T(g) = Q)q.\T q ,\(g) where q labels inequivalent 
irreps and A is a multiplicity index. It follows that 

M= UgT q>x {g)ATy y {g). (2.27) 

q,q',\,\' J 

Define A^/^a' = / dgT gi \(g)AT%, x ,(g). Because of the 
invariance of the measure dg, it follows that 

T qiX {g)A qiq , xx ,Tl, x ,(g)=A q , q ,, XtX ,, V 9 eG. (2.28) 

Thus, by Schur's second lemma, A qq i x .x' = for q ^ q 1 . 
Eq. (2.27) can then be expressed as 

M = / dgT q , x (g)ATl x ,(g). (2.29) 

q,X,X' J 

Let Hq,x be the projection of Tt onto the carrier space of 
T q .\, and let U q = J2 X ^q,x- Then the above equation 
can be expressed as 

g[A]=J2 fdgT qtX (g)Il q AU q Tl y (g), (2.30) 

q,X,X' J 

and thus we can express Q as 

g = Y J Q q oV q , (2.3i) 

q 

where Q q [A q ] = T,x,X> f d 9 T q,x(9) A q T lx>(9) is a su Per- 
operator on TL qi and recall that V q [A] = H q AU q . 

We now determine the form of Q q in terms of the tensor 
product structure H q = M q ®Af q . The projector II^a can 
be expressed in terms of this tensor product as II^a = 
ILvig ® IIa, where ILx^ 1S the projector onto A4 q , and 
ITa is the rank-1 projector on M q that "picks out" the 
representation A of G. The rank-1 projectors IIa form a 
basis for Af q , so that J^x Ha is the identity on Af q . Given 
that T q (g) acts nontrivially only on TL qi we can write 
Tq.x(g) = T q (g) <g> n A . It follows that 

G[A}= [dg(T q (g)®n x )n q An q (T}(g)®Il x ,) 

q,X,X> J 

= W d fl (T a a,)®2n A )n,^n,(Tt( 5 )®^;nv) 

q J X X' 

= ^(^,®I^)o?,[A], (2.32) 
q 

where the superoperator Qm q takes an operator B on M q 
to G Mq [B] = J dgT q {g)BTl\g). By Schur's first lemma, 
£m [B] is a multiple of identity on M. q . Therefore, be- 
cause the map Q is trace-preserving, Q Mq — T> Mq , the 
trace-preserving map that takes every operator on M q 
to a constant times the identity on M q . ■ 



III. QUANTUM INFORMATION WITHOUT A SHARED 
REFERENCE FRAME 

In implementing multi-partite cryptographic and com- 
munication tasks using quantum systems, it is gener- 
ally presumed, at least implicitly, that all parties share 
perfect reference frames for all relevant degrees of free- 
dom. Moreover, one might think that in order to achieve 
some or all of these tasks, they must share such refer- 
ence frames; for instance, one might think that if they 
wish to achieve quantum communication using the Fock 
space of an optical mode, they must share a phase refer- 
ence, and if they wish to do so using spin-1/2 systems, 
they must share a reference frame for spatial orientation. 
This impression is mistaken; quantum information pro- 
cessing tasks can be achieved without first establishing a 
shared reference frame by using entangled states of mul- 
tiple systems, that is, relational encodings. 

A classical analogue is elucidating. If two parties do 
not share a Cartesian frame, then they cannot commu- 
nicate any classical information to one another through 
encodings in the directional degree of freedom of a sys- 
tem. For instance, if Alice encodes information into the 
orientation, relative to her frame, of a physical arrow or 
gyroscope, Bob cannot access this information because he 
can compare the system with his frame only. Nonethe- 
less, they can still communicate by encoding information 
in the relative orientations of two or more such systems. 
We shall be concerned with the quantum analogue of such 
relational encodings. 

The essential idea is to use the result, presented in 
Sec. II, that the effect of lacking a shared RF can be ex- 
pressed as a form of decoherence. We then make use of 
the techniques of decoherence-free subspaces and subsys- 
tems (Kempe et al, 2001; Knill et ai, 2000; Zanardi and 
Rasetti, 1997) to find quantum states that are protected 
from the noise. These techniques (and variants thereof) 
can be interpreted as yielding relational encodings. They 
are in fact ideally suited to the problem of overcoming the 
lack of a shared RF because the existence of decoherence- 
free subspaces and subsystems relies on there being non- 
trivial symmetries in the noise, something that may not 
occur for a realistic noise model, but which is guaranteed 
to occur in the present context. For instance, in order 
to redescribe, relative to one RF, a qubit state that is 
defined relative to a second, uncorrelated RF, one must 
apply to it an unknown unitary. To redescribe, relative 
to this RF, many qubits that were all prepared relative to 
the same RF, one must apply precisely the same unitary 
to each. 

We begin in Sec. III. A by applying these techniques 
and others to determine the efficiency with which clas- 
sical and quantum communication can be performed in 
the presence of such noise. The implications for quan- 
tum key distribution are discussed in Sec. III.B. We also 
discuss the important issue of sharing entanglement be- 
tween two parties who lack a shared RF; we demonstrate 
in Sec. III.C that a rich structure emerges in bipartite en- 
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tanglemcnt of pure states when this restriction applies. 
Finally, in Sec. III.D, we investigate the cryptographic 
power of private shared RFs, where it is assumed that 
it is an eavesdropper Eve who fails to have a sample of 
Alice and Bob's RF. 



A. Communication without a shared reference frame 

1. Communication using photons without a shared phase 
reference 

Consider the following problem: Alice wants to com- 
municate some amount of classical or quantum informa- 
tion to Bob using an optical channel, i.e., using quantum 
states of some number of optical modes, when they do not 
share a phase reference. Using the formalism of Sec. II. B, 
a state p prepared by Alice is represented by Bob as the 
(generally mixed) state U[p] = J2 n H n pU n . This problem 
thus takes the form of a more standard one from quan- 
tum communication: how to communicate quantum or 
classical information through a noisy channel described 
by a decoherence map hi. 

The communication may be constrained in some addi- 
tional way, such as by a limit on the number of usable 
optical modes, or by an energy limit that bounds the 
maximum number of photons that can be transmitted, or 
both. Because of these constraints, Alice and Bob wish 
to use a communication protocol that makes optimal use 
of these resources. 

Let's first consider classical communication. The sim- 
plest possible problem is the one wherein Alice is re- 
stricted to sending at most one photon to Bob, using a 
single optical mode. Clearly, using such a channel, Alice 
can communicate a single classical bit to Bob by send- 
ing either a single photon |1) or no photon (the vacuum) 
|0). 6 This protocol does not rely on Alice and Bob shar- 
ing a phase reference, because both the states |0) and |1) 
are invariant under the superoperator U. Generalizing 
this result, if Alice can send at most N photons in a sin- 
gle mode, she can communicate N + 1 classical messages 
(equivalently, log 2 (iV + 1) classical bits) to Bob. With 
K > 1 modes, one has to consider all the possible ways 
of distributing N photons among K modes. The dimen- 
sion of the resulting Hilbert space is (N + K)\/N\K\, 
and specifies the number of classical messages Alice can 
communicate using eigenstates of photon number. 

What about quantum communication? Again, con- 
sider a situation wherein Alice is restricted to sending 
at most a single photon to Bob using a single optical 
mode. Any state p\ Alice prepares must then have sup- 



Such an encoding is not feasible in practice, because all photon- 
based communication schemes rely on obtaining a detector event 
(a "click") for every message. Specifically, the detection of the 
vacuum cannot be discriminated from an event where the photon 
is lost, or missed by the detector. 



port on the qubit Hilbert space spanned by {|0),|1)}, 
and any such state is represented by Bob as U[p\] = 
Po|0)(0| for pi = (i|pi|i), i.e., as an incoherent 

mixture of the zero- and one-photon states. Any qubit 
state is completely depolarized according to Bob. Thus, 
quantum communication cannot be performed by using 
only a single mode with at most one photon. This nega- 
tive result is one of many disadvantages to this encoding 
of a qubit into states spanned by |0) and |1), known as 
the "single-rail" encoding (Kok et at, 2006). Clearly, 
no quantum communication can be performed using any 
number of photons in a single mode, because Bob rep- 
resents all states prepared by Alice as being diagonal in 
the photon number basis. 

Now consider the case where Alice can make use of two 
modes in her communication to Bob. Noting that Bob 
will represent any preparation by Alice as block-diagonal 
in the eigenspaces of total photon number, Alice should 
prepare states lying in just one of these eigenspaces if she 
wishes to communicate quantum information. For exam- 
ple, the one-photon eigenspace of two modes (labelled a 
and b) is two-dimensional, and a general pure state on 
this eigenspace has the form 

|V>n=i =a|l) o |0> 6 + /?|0> o |l>6, (3-1) 

for a, (3 e C satisfying \a\ 2 + \f3\ 2 = 1. Any such state 
satisfies = \ip)i(tl>\; this two-dimensional sub- 

space is a decoherence- free subspace aili. Using states of 
this form, Alice can communicate a single qubit to Bob 
without requiring a shared phase reference. We note that 
this encoding is the commonly-used "dual-rail" encoding 
of optical quantum computing (Kok et al, 2006). Ev- 
idently, to communicate quantum information using at 
most N photons in M modes without a shared phase ref- 
erence, Alice and Bob should make use of the eigenspace 
of total photon number N' (N 1 < N) that has the largest 
dimension. This eigenspace is the one corresponding to 
N' = N, and has dimension (N + K - l)\/N\{K - 1)!. 

Using multiple modes of the optical field raises addi- 
tion issues regarding the use of reference frames, depend- 
ing on how these modes are identified, and this can lead 
to a much richer structure. For example, in the dual-rail 
encoding of Eq. (3.1), the modes a and b could represent 
different spatial or temporal modes, in which case Alice 
and Bob would require a shared Cartesian frame or a 
clock in order to identify these modes. Another common 
implementation for this encoding is for a and b to rep- 
resent the two polarization modes of the single photon 
(for example, horizontal and vertical polarization) - a 
so-called "polarization encoding" (Kok et al, 2006). For 
Alice and Bob to share quantum information using such 
an encoding, although they do not need to share a phase 
reference, they do need to share a reference frame for 
polarization, i.e., to agree on an axis for their polarizing 
materials that are used to prepare, manipulate, and mea- 
sure such states. The efficiencies of general schemes for 
transmitting quantum information via the polarization 
and phase of optical modes when parties do not share a 
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reference frame for polarization have been fully charac- 
terized (Ball and Banaszek, 2005, 2006). 

Recently, optical quantum information experiments 
have made use of the spatial mode structure of 
light (Langford et al, 2004; Mair et al, 2001; Vaziri 
et al., 2003); use of this degree of freedom requires a 
shared reference frame for both position and orienta- 
tion. Using spatial modes, it is possible to restrict at- 
tention to states of a single photon with a fixed orbital 
angular momentum (the standard basis for which is the 
Laguerre-Gauss- Vortex modes (Siegman, 1986)). Encod- 
ings into a subspace of fixed orbital angular momentum 
will be invariant under rotations about the direction of 
propagation, and thus will not require a shared refer- 
ence frame for orientation about this direction. These 
encodings do require a shared reference frame for the di- 
rection of propagation, and also a precise determination 
of the separation between parties in order to compensate 
for the relative phase (Gouy shift) acquired between dif- 
ferent states of fixed orbital angular momentum during 
propagation (Spedalieri, 2004). 

2. Communication without a shared Cartesian frame 

We now turn our attention to the problem of how 
Alice and Bob can perform both classical and quan- 
tum communication through the exchange of spin-1/2 
systems (qubits) when they lack a shared Cartesian 
frame (Bartlctt et al, 2003). This problem has a much 
richer structure than the phase-reference case investi- 
gated above, due to the existence of decoherence-free 
subsystems (rather than subspaces). For simplicity, we 
consider a noiseless channel that transmits these spin-1/2 
systems from Alice to Bob; these results can be extended 
to noisy channels or higher-dimensional (spin > 1/2) sys- 
tems (Byrd, 2006; van Enk, 2006). 

The group of transformations of orientation relative 
to a Cartesian frame is SO (3), which we will extend to 
SU(2) to allow for spinor representations. We will de- 
note an element of SU(2) by fi, which might represent, 
for instance, a set of three Euler angles. In the case of 
a single spin-1/2 system, the Wigner rotation operators 
i?(f2) provide an irreducible representation of SU(2). If 
Alice sends N spin-1/2 systems to Bob, and she describes 
these, relative to her Cartesian frame, by p then Bob de- 
scribes these same spins relative to his Cartesian frame 

by 

£ N [ P ]= J dVLR{VL)® N P R\VL)® N . (3.2) 

That is, he averages over all passive rotations that might 
relate his frame to Alice's, and every rotation acts on each 
of the N spins identically as R(fi)® N because each spin 
experiences the same rotation by virtue of the fact that 
each is prepared relative to the same Cartesian frame. 
We refer to this representation of SO (3) as collective. 
Thus, Bob's lack of Alice's Cartesian frame has the same 



effect as collective noise on the channel. It is still possi- 
ble for Alice and Bob to communicate by encoding in the 
relational degrees of freedom of the qubits, as we shall 
see. 

The problem of determining the communication capac- 
ities in the presence of this restriction is quite simple if 
we decompose the Hilbert space in the manner dictated 
by Eqs. (2.22) and (2.23). We begin with some simple 
examples, illustrating the basic techniques and some few- 
qubit schemes for classical and quantum communication, 
before presenting the general results. 



a. One transmitted qubit. Given that i?(f2) is an irre- 
ducible representation on r Hi/2 1 by Schur's lemma, the 
SU(2)-twirling on one qubit is equivalent to the com- 
pletely depolarizing operation, 

£i = V Hl/2 ■ (3.3) 

Thus, if Alice prepares a single qubit in the state p and 
transmits it to Bob, he represents the state of this re- 
ceived qubit as the completely mixed state 

EM = \I- (3-4) 

Consequently, Bob can infer nothing about p from the 
outcome of any measurement. So, without a shared RF, 
Alice cannot communicate any information to Bob using 
only a single qubit. 



b. Two transmitted qubits: a classical channel. The uni- 
tary representation i?(f2)® 2 of SU(2) is reducible. To 
decompose it into irreducible representations, we briefly 
review the representation theory of SU(2). 

The inequivalent representations of SU(2) are labeled 
by the total angular momentum J 2 quantum number j. 
The carrier spaces of these representations are the charge 
sectors Tlj. The carrier spaces of the irreducible rep- 
resentations, the gauge spaces, are denoted Mj. Such 
spaces have dimensionality 2j + 1, and may be decom- 
posed into a basis | j, m) of cigcnstates of J z with eigen- 
values Hm where m € {—j, — j + 1, • • • ,j}- The multi- 
plicity spaces Afj arise when there are different ways of 
coupling multiple systems to a given total angular mo- 
mentum. A pair of spins with angular momentum num- 
bers ji and j2 couple to any total angular momenta j 
satisfying |ji — j 2 1 < j < ji + ji- We summarize this as 
ji ® J2 = |ji - J2I © • • • © (ji + k)- 

It follows that for a pair of spin 1/2 systems, we have 
(I)® 2 = I®I=0©1. The possible total angular mo- 
menta are j = and j = 1 and each has multiplicity 
1. The joint eigenstates of total angular momentum op- 
erators J 2 and J z , denoted \j,m), form a basis of the 
Hilbert space (the coupled representation). We can re- 
late this coupled basis to the joint eigenstates of J 2 , J\ z , 
J 2 , J2Z, denoted by |ji,mi) ® \j2,m2} (the uncoupled 
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representation) by 

|1,1) = |00) (3.5) 
|1,0) = (|01) + |10))/V2 (3.6) 
|1,-1) = |11) (3.7) 

|0,0) = (|01)-|10))/^=|V>-) (3.8) 

where |0) (|1)) is the quantum information-theoretic 
shorthand for 1 1/2, ±1/2), and |01) = |0) <g> |1), etcetera. 
These are the j = 1 (symmetric) triplet states and the 
j = (antisymmetric) singlet state. 

Suppressing multiplicity spaces when they are 1- 
dimensional (because Hj = A4j <8> C = A4j), we have 

(H 1/2 )® 2 =H 3=1 ®H 3=0 , (3.9) 

4 3 1 

where the dimensionality of each space is expressed in 
bold underneath each subspace. Writing i?(£l)® 2 = 
Rj=i(Q) Rj = o(fl), and applying Schur's lemma, we in- 
fer that 

£2 = (V Mj=1 o p j=1 ) + V 3=0 , (3.10) 

where Vj[p] = HjpILj and Ilj is the projector onto the 
subspace Hj. This equation asserts that the coherence 
between the singlet and triplet spaces is eliminated and 
the triplet space is depolarized. 

Thus, if Alice transmits two qubits and she assigns the 
state p to the pair, Bob describes the pair by 

£M =Pi=i(|n j=1 ) + Pj=0 \ii>-)(i>-\ , (3.11) 

where pj = Tr(/TL, ). Note that Bob can distinguish per- 
fectly between the antisymmetric state \ip~){ip~\ and a 
state ps which lies in the symmetric subspace because 
£ 2 [\ip~){^~\] = \^~){^~\ and £ 2 [As] = l^j=i, and these 
two images are orthogonal. 

Thus, Alice can communicate one classical bit to Bob 
with every two transmitted qubits by implementing the 
following protocol: Alice sends Bob the antisymmetric 
state \ip~) to communicate b = and any state in the 
symmetric subspace (for example, the state |00)) for b = 
1. Bob then performs a projective measurement onto the 
antisymmetric and symmetric subspaces and recovers b 
with certainty. 

c. Three transmitted qubits: a quantum channel. We must 
determine how R(Q)® 3 is decomposed into irreducible 
representations. To see how three spin- 1/2 systems cou- 
ple to total spin, imagine coupling the first pair to a 
spin ji and then coupling this to the third: (5) 813 = 
(0 1) <S> I = \ @ I © §■ Note that because the third 
spin 1/2 can couple to either j\ = or j\ = 1 to yield 
j = 1/2, the latter representation has multiplicity 2. We 
let 1 1/2 , ±1/2, A) denote a basis of Hj=i/ 2 in the coupled 
representation, where A is a degeneracy index which by 
convention we take to be if the coupling was to j\ = 



and 1 if the coupling was to j\ = 1. These states can be 
given explicitly in terms of the three spin- 1/2 systems as 



1 2 ' 2 ' ' 


-4(1011) -|101)), 
\ z 




(3.12) 


l-i0) = 

2 ' 2 ' / 


-L(|oio)-|ioo», 




(3.13) 


ii i n = 

1 2 ' 2 ' / 


-L(2|110)-|101)- 


ion)), 


(3.14) 


- -- i) = 

2 ' 2 ' / 


-L(-2|001) + |010) 


+ |100)). 


(3.15) 



We can then define an isomorphism Hj—1/2 = A^-^i/2 ® 
Aj=i/2 through \m) ® |A) = ||,m, A) with \m) a basis of 
■A4j = i/2 and |A) a basis of the multiplicity space A/} = i/2- 
Thus the total Hilbert space decomposes as 

(H 1/2 )® 3 = W j=3/2 © (M j=1/2 ® A^ =1/2 ) , (3.16) 

8 4 2 2 

where again we have included the dimensions of each sub- 
system. 

An application of Schur's lemma along the lines pre- 
sented in Sec. II. C implies that 

£3 = V Mj=3/2 ° V j=3 /2 + {V Mj=1/2 O 2jv J=1/2 ) ^=1/2 • 

(3-17) 

where X is the identity map. Note that the operation 
T>Mj is only defined on the space of operators acting 
on M. j ®Mj = Hj , but it is always preceded by Vj , which 
projects into this space. If Alice prepares three qubits in 
the state p, then Bob assigns to them the state 

£3[p] =f> 3 /2 Qn j=3/2 ^ + Pl/2 Q/tw j=1/2 ®P*r j=1/ ^j , 

(3.18) 

where pj = Tr (pUj) and 

W J=1/J =Pi} 2 Ti m ]=1/2 (Uj =1/2 pU j=1/2 ) . (3.19) 

We note that the subsystem Afj=i/ 2 is unaffected by 
the decohering superoperator £ 3 ; i.e., it is a decoherence- 
free subsystem. Thus, Alice can encode a logical qubit 
into this subsystem (Kempe et al, 2001). That is, she 
can prepare states of the form a®p on Mj=\/ 2 ®A/}=i/ 2 , 
where p is the logical qubit state she wishes to transmit to 
Bob, and Bob can access this decoherence-free subsystem 
and retrieve the quantum information without a shared 
RF. Thus, one logical qubit can be transmitted using 
three physical qubits without a shared RF. 

d. Asymptotic behaviour. The above two schemes 
demonstrate that classical and quantum communication 
are possible without a shared RF. The efficiency of 
the above schemes can be increased through the use of 
more qubits, because the sizes of the decoherence-free 
subsystems can grow exponentially with increasing 
number of qubits. 
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For simplicity, we consider only the case where N is 
even. The collective (tensor) representation of SU(2) on 
N spin-1/2 systems, R(£l)® N , can again be decomposed 
into a direct sum of SU(2) irreps, each with angular mo- 
mentum quantum number j ranging from to N/2. That 
is, we can decompose the Hilbert space as 

N/2 

(n 1/2 f N = Mi ® Mj , (3.20) 

2 N ,=o 2j+l C (N) 

J j 

where we have indicated the dimensions of the various 
spaces. The multiplicity of the irrep j, which is the di- 
mension of Afj , is found from representation theory to 
be 

C > -\N/2-jjN/2 + j + l- (d - 21) 

Relative to this decomposition, the SU(2)-twirling op- 
eration £m has the form 

£ N = Y.^M, ® Itf, )oP jt (3.22) 

3 

as can be inferred from the result for arbitrary groups 
in Sec. II. C. The carrier spaces for the irreducible rep- 
resentations of SU(2), the Mj, are the decoherence-full 
subsystems for £n, while the multiplicity spaces Mj, 
which carry the trivial representation of SU(2), are the 
decoherence-free subsystems for £n. 

Alice can choose to transmit classical messages by 
preparing orthogonal states as follows: for each irrep j, 
she can choose one arbitrary state from each multiplic- 
ity. Thus it is possible to transmit, without a shared 
RF, a number of classical messages equal to the number 
(j( N ) f SU(2) irreps in the direct sum decomposition of 
the tensor representation of SU(2) on N qubits, which is 
given by 

N/2 / AT \ 

c""=x>r=C4 2 )- pa) 

In fact, this is the maximum number of classical messages 
that can be sent; for a proof, see Bartlett et al. (2003). 
Thus, the number of classical bits that can be transmit- 
ted per qubit using the above scheme is N" 1 log 2 C^ N \ 
which tends asymptotically to 1 — (2iV) _1 log 2 N; in the 
large N limit, one classical bit can be transmitted for 
every qubit sent. Remarkably, this rate is equivalent to 
what can be accomplished if Alice and Bob do possess a 
shared RF. 

To determine the optimal scheme for transmitting 
quantum (rather than classical) information, again us- 
ing N qubits and under the restriction of no shared RF, 
we identify the largest decoherence-free subsystem for 
£n- This is the subsystem Mj with the greatest mul- 
tiplicity c^ N \ Asymptotically, this is found to occur at 
jmax = VN /2, and the number A^ _1 log 2 cjf2x °^ l°gi ca l 



qubits encoded per physical qubit in N physical qubits 
behaves as 1 — N^ 1 log 2 (iV), approaching unity for large 
N. Full details can be found in Kempe et al. (2001). 
This remarkable result proves that quantum communi- 
cation without a shared RF is asymptotically as effi- 
cient as quantum communication with a shared RF, and 
is the communication analog of "asymptotic universal- 
ity" (Knill et al, 2000). In addition, we note that the 
algorithm for encoding/decoding quantum information 
into the decoherence-free subsystems can be done effi- 
ciently (Bacon et al., 2006a, b). 



e. Relativistic considerations. The ability to perform 
quantum information processing in a relativistic setting 
has also been of recent interest (see Peres and Terno 
(2004) for a review), and in this context it is natu- 
ral to consider whether parties who do not share an 
inertial frame (i.e., a reference frame for the Poincare 
group) can still perform quantum communication, etc., 
and at what efficiency. It has been shown that classi- 
cal and quantum communication can be performed at 
the same rate as demonstrated above using indistinguish- 
able massive spin-1/2 particles, or using photons, if ap- 
propriately localized wavepackets for these particles are 
used (Bartlett and Terno, 2005). In addition, continuous- 
variable quantum information can be shared using re- 
lated methods (Kok et al, 2005). 



3. Consequences for quantum information processing 

The communication schemes presented above imply 
that Alice and Bob can share entangled states in the 
absence of any particular shared RF. Consider the 
case of lacking a shared Cartesian frame as an ex- 
ample. Denoting the logical qubit that can be en- 
coded using three physical qubits in Alice's (Bob's) 
possession by {\0l)a(b),\^l)a(b)}, a triple of physical 
qubits in Alice's possession can be maximally entan- 
gled with a triple in Bob's possession using the state 
-^(\0l)a\0l)b + |U>a|1l)s). Because Alice and Bob 
can perform any measurement in their respective logi- 
cal qubit Hilbert spaces, they can demonstrate quantum 
nonlocality (Bell's theorem) despite having no shared 
Cartesian RF (Bartlett et al., 2003; Cabello, 2003). It 
also follows that such entangled states can be used for 
quantum teleportation of logical qubits, which implies 
that the latter does not rely upon the existence of a 
shared Cartesian RF either, contrary to some expecta- 
tions (van Enk, 2001). In fact, for any quantum infor- 
mation task that assumes some shared RF, it is possi- 
ble to make use of logical encodings to perform the task 
without this shared RF. (Any task, that is, which deals 
with speakable rather than unspeakable quantum infor- 
mation; the alignment of RFs, for instance, obviously 
cannot be achieved in this way.) It should be noted, how- 
ever, that although one can achieve quantum information 
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tasks without any particular kind of shared RF, some 
form of shared RF is always required. For instance, in 
the example just described, Alice and Bob must agree on 
the ordering of the three physical qubits, and this agree- 
ment constitutes a kind of shared RF (Bartlctt et at, 
2004a). 

Several recent experiments have demonstrated the key 
techniques required for quantum information processing 
without a shared Cartesian frame. These experiments 
make use of single-photon polarization qubits. Lacking 
a shared RF for polarization means that Bob's polariz- 
ing elements (such as calcite crystals) are uncorrelated 
with Alice's. The relevant group is also SU(2), and thus 
the analysis presented above applies to this scenario as 
well. Banaszek et al. (2004) have demonstrated that two 
orthogonal entangled states of two single-photon polar- 
ization qubits remain perfectly distinguishable between 
two parties who do not share a reference frame for polar- 
ization, thereby demonstrating the classical communica- 
tion protocol in Sec. III. A. 2b. In addition, Bourennane 
et al. (2004) have demonstrated non-orthogonal entan- 
gled states - states of a logical qubit encoded in four 
single-photon polarization qubits - that are identical in 
any reference frame; see also Zou et al. (2006). These 
states demonstrate the basic principles of a decoherence- 
free subsystem that are needed for quantum communica- 
tion without a shared RF. 



B. QKD without a shared reference frame 

The possibility of performing secure communication 
through the use of quantum key distribution (QKD) is 
one of the most celebrated applications of quantum in- 
formation science (Gisin et al., 2002). Because of its ad- 
vanced state of development, it is also one of the first 
quantum protocols to require explicit consideration of 
shared reference frames, or the lack thereof, between 
communicating parties. All practical QKD protocols are 
based on the exchange of quantum states of light, and 
as discussed in Sec. III.A.l, essentially any identification 
of a mode structure (either spatial, time-bin, or polar- 
ization) requires a reference frame of some sort. For ex- 
ample, in all single-photon implementations of QKD, a 
shared clock is necessary in order to agree upon a short 
time window for communication; otherwise, dark counts 
from the photodetectors can greatly reduce security and 
efficiency (Brassard et al, 2000). 

QKD schemes that obviate the need for certain shared 
reference frames (and that are robust against other forms 
of noise) have recently been developed, and make use of 
the techniques of decoherence-free subspaces and subsys- 
tems (Walton et al, 2003). Consider the following pro- 
posal of Boileau et al. (2004). Alice (the sender) and 
Bob (the receiver) wish to perform QKD using the po- 
larization states of single photons. This choice avoids the 
stabilization problems inherent in phase-based schemes, 
but presents a problem of its own: if an optical fibre 



is used as the quantum channel, the polarization of a 
transmitted photon is rotated by a random amount due 
to optical birefringence. Although this random rotation 
fluctuates with time, it can be considered constant on a 
short time scale so that all photons in a pulse are sub- 
ject to the same rotation. Thus, the problem becomes 
equivalent to one in which Alice communicates to Bob 
using a noiseless channel, but in which they do not share 
a reference frame for polarization. The communication 
scenario, then, becomes equivalent to that analyzed in 
Sec. III.A.2. 

Alice can perform quantum communication with Bob 
without a shared RF for polarization through the use 
of decoherence-free subspaces or subsystems. We now 
briefly outline two straightforward and experimentally- 
accessible QKD protocols using these techniques; the 
first protocol makes use of a four-photon decoherence-free 
subspace, and the second makes use of a three-photon 
decoherence-free subsystems. 

The smallest non-trivial decoherence-free subspace for 
the superoperator £jv of Eq. (3.2) occurs for N = 4. 
It is the two-dimensional j — (singlet) subspace. A 
simple QKD scheme using this subspace is as follows. 
Define the state = (|0> M |1>^ - |l) M |0)„)/\/2 to be 

the two-photon singlet state of photons /j, and v (fi, v £ 
{1,2,3,4}). Define three four-photon states as products 
of singlet states of differing photons, i.e., 

I*i> = hr>i2hr>34, 

|*2> = hr>ishT>24, (3.24) 

1*3) = 1^)14^^)23 • 

Clearly, all three states are j — (singlet) states in the 
N = 4 decoherence-free subsystem. Thus, each of the 
states \^ a ) prepared by Alice is represented the same 
way by Bob, even though they do not share a reference 
frame for polarization. 

Note that these states are also non-orthogonal, satis- 
fying |(\I> a |\l> 6 )| = 1/2 for a 7^ b. Thus, if Alice restricts 
her transmitted states to a pair of these, then they can 
implement a B92-type QKD protocol (Bennett, 1992). In 
addition, this protocol can be defined in such a way that 
Bob need only perform single-photon measurements in 
some fixed polarization basis (i.e., without the need for 
entangling measurements); see Boileau et al. (2004) for 
details. 

As noted in Sec. III.A.2, there exists a two-dimensional 
decoherence-free subsystem with N = 3. There is a sim- 
ple modification of the above QKD protocol which makes 
use of this subsystem. Define the following three mixed 
states, obtained from the three pure states of Eq. (3.24) 
by discarding the last photon, i.e., 

Pa = TM|*aX*a|]. ( 3 ' 25 ) 

In terms of the decomposition of the three-qubit Hilbcrt 
space of Sec. III. A. 2c, all three of these states lie on the 
W J= i/2 subspace, and in terms of the tensor product 
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structure Hj-1/2 = -Mj—i/2 <S>-A/} = i/2, these states are 
products of the completely mixed state \l on M.j=\/2 
and one of three pure non-orthogonal states on Mj = i/ 2 - 
Again, if Alice restricts her transmitted states to a pair 
of these, then they can implement a B92-type QKD pro- 
tocol without the need for a shared RF for polarization. 

The unconditional security of the QKD schemes of 
Boileau et al (2004), which are based on the use of the 
above states, has been proven (Boileau et al, 2005). In 
addition, a BB84- version of this QKD scheme, which does 
not require a shared reference frame for polarization, has 
been demonstrated experimentally (Chen et al, 2006). 
We note that the essential concept of this scheme - to 
use the techniques of decoherence-free subspaces or sub- 
systems to obviate the necessity for a shared reference 
frame in QKD - can be applied to any system and RF. In 
particular, it has been proposed to use the spatial encod- 
ings of optical modes discussed at the end of Sec. III.A.l 
to perform QKD (Spedalieri, 2004). 



C. Entanglement without a shared reference frame 

Entanglement is often considered the key resource in 
quantum information processing, and so it is valuable 
to consider the role of shared reference frames in both 
qualitative and quantitative properties of bipartite en- 
tanglement. As we will demonstrate in this section, the 
very meaning of entanglement between parties who do 
not share a reference frame must be reassessed, with some 
surprising results. 



1. Entanglement without a shared phase reference 

As an example, we again consider a number of optical 
modes shared between two parties, Alice and Bob, who 
do not share a common phase reference. We will con- 
sider all states and operations to be described relative 
to the phase reference of a third party, Charlie, which is 
assumed to be uncorrelated with both Alice's and Bob's 
local phase references. (For many of the issues we wish 
to consider, we could dispense with Charlie and describe 
everything relative to either Alice or Bob, but this intro- 
duces an artificial asymmetry into the formalism which 
easily leads to confusion. We therefore opt to describe 
all states relative to Charlie, whether he participates in 
the protocol or not.) As such, Alice redescribes states 
prepared relative to Charlie's phase reference by mixing 
over all possible phase shifts. Bob does the same, and 
because Alice and Bob's phase references are uncorre- 
lated, the phases over which they mix are independent. 
Recalling the results of Sec. II. B, the mixing over phases 
yields a photon-number superselection rule, and the in- 
dependence implies that Alice and Bob are subject to 
local photon-number superselection rules. In this case, 
all of Alice's operations commute with the local map Ua, 



defined as in Eq. (2.9) as 

U a \pa] = Y,KpaK, (3-26) 

n 

where IT^ in the projector onto the eigenspace of total 
photon number n on Alice's local modes. All of Bob's 
operations commute with the local map Ub, defined sim- 
ilarly. 

In such situations, there has been considerable de- 
bate over the entanglement properties of certain types 
of states, such as the two-mode single-photon state (van 
Enk, 2005b; Greenberger et al, 1995; Hardy, 1994, 1995; 
Tan et al, 1991), 

(|0) A |l) B + |l) j4 |0) B )/V2. (3.27) 

There is a temptation to say that this state is entangled 
simply because of its non-product form. However, it is 
far more useful to consider whether or not this state sat- 
isfies certain operational notions of entanglement. One 
such notion is whether a state can be used to violate a 
Bell inequality. Another is whether it is useful as a re- 
source for quantum information processing, for instance, 
to teleport qubits or implement a dense coding proto- 
col. In the context of a local photon-number superse- 
lection rule, this two-mode single-photon state fails to 
satisfy either of these notions of entanglement, because 
all such tasks would require Alice and Bob to violate the 
local photon-number superselection rule. A different but 
equally common notion of entanglement is that a state is 
entangled if it cannot be prepared by LOCC. The two- 
mode single-photon state certainly does fit this notion 
because the pure non-product states cannot be prepared 
by LOCC. Thus we see that operational notions of en- 
tanglement that coincided for pure states under unre- 
stricted LOCC, namely being not locally preparable and 
being useful as a resource for tasks such as teleportation 
or violating a Bell inequality, do not coincide under a lo- 
cal photon-number superselection rule, and the state in 
question is judged entangled by one notion and not the 
other. 7 

Another class of states whose entanglement properties 
have been discussed in the quantum optics literature are 
those that are separable but not locally preparable under 
a local photon-number superselection rule (Rudolph and 
Sanders, 2001b; Verstraete and Cirac, 2003). Examples 
of such states are 

\+)a\+)b, \~)a\-)b, (3.28) 

where |±) = (|0) ± \1))/V2. (Rudolph and Sanders 
(2001b) and Verstraete and Cirac (2003) considered 



Of course, if there is no local photon-number superselection rule, 
this state would satisfy all of these notions of entanglement, as 
emphasized by van Enk (2005b). In particular, no such super- 
selection rule would apply if all parties share a common phase 
reference. 
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states such as the equal mixture of |+}a|+)b and 
I - )a\~ )b- F° r simplicity, we restrict our attention to 
pure states.) Because of the superselection rule, these 
states cannot be prepared locally. However, because they 
are product states, they clearly cannot be used for tasks 
such as teleportation or violating a Bell inequality. We 
will return our attention to states such as these in Sec. IV. 
In contrast, consider a state of the form 

(|01)a|10)b + |10)a|01) b )/>/2. (3.29) 

This state is certainly not locally preparable. In addi- 
tion, it can be used to violate a Bell inequality, imple- 
ment dense coding, and so on, despite the superselection 
rule. This is because Alice and Bob can still implement 
any measurements they please in the 2-dimensional sub- 
spaces spanned by 1 01) and |10). Thus, this state is un- 
ambiguously entangled by any reasonable notion. 

We see, then, that the remarkable and often confusing 
entanglement properties of states when parties do not 
share a reference frame can be understood by recogniz- 
ing that different operational notions of entanglement do 
not coincide in this case. Specifically, for pure quantum- 
optical states in a situation where Alice and Bob to not 
share a phase reference, there exists a proper gap be- 
tween states that are locally-preparable under LOCC, 
and states that are useful for performing quantum infor- 
mation tasks such as teleportation and violating a Bell in- 
equality. The existence of this proper gap is reminiscent 
of a similar situation for mixed quantum states: that of 
bound entanglement (Horodecki et al., 1998). This anal- 
ogy can be extended further; in the following section, 
we demonstrate that some of the strange phenomena 
from mixed-state entanglement - activation, and multi- 
copy entanglement distillation - are present as well in 
pure-state quantum optics with a local photon-number 
SSR. This analogy is pursued in detail in Bartlett et al. 
(2006a). 

2. Activation and entanglement distillation 

In this section, we demonstrate that there exist analo- 
gous processes of activation (Horodecki et al, 1999) and 
multi-copy entanglement distillation (Watrous, 2004) us- 
ing pure bipartite quantum-optical states when Alice and 
Bob do not share a phase reference. An understanding of 
these processes and their relation to the above-mentioned 
gap between two commonly- used notions of entanglement 
is key to resolving several recent controversies regard- 
ing the entanglement of quantum-optical states (Bartlett 
et al, 2006a; van Enk, 2005a). 

We now demonstrate that, to achieve a Bell inequality 
violation with the state 

(|0)a|1)s + |1)a|0) s )/\/2, (3.30) 

it is necessary to use a process that is analogous to ac- 
tivation. Understanding the necessity of an additional 



resource for this process resolves the controversy over 
the use of the state to demonstrate quantum nonlocal- 
ity (Greenberger et al, 1995; Hardy, 1994, 1995; Tan 
et al, 1991). 

As we have shown, this state cannot be used for 
tasks such as violating a Bell inequality when Alice and 
Bob do not share a phase reference, i.e., when a lo- 
cal photon-number superselection rule applies. However, 
combining (|0) A |l)s + \1) A \0) B ) / V? with \+}a\+)b, one 
obtains a state that is useful for such tasks. The 
state is sa id to activate the entanglement of 

(|0)a|1)b + \1)a\0)b)/V2. This is seen as follows. Let 
Alice and Bob both perform a quantum non-demolition 
measurement of local photon number on both of their lo- 
cal modes, and post-select the case where they both find 
a local photon number of one. The resulting state is 

nf ®nf[^(|o)x|i> B + |i>A|o) B )|+)x|+>B] 

cx ^(|01)a|10) b + \10) a \01)b) ■ (3.31) 

Violations of a Bell inequality have recently been 
demonstrated experimentally using the state (3.30) by 
Hessmo et al. (2004) and Babichev et al. (2004). One can 
take two different perspectives on such an experiment. It 
is illustrative to consider them both. 

In Hessmo et al. (2004), in addition to the state (3.30), 
a correlated pair of coherent states la^la)^, where \a) = 
Sn( e ~' Q ' ^ 2 ct n / Vn\)\n) , are assumed to be shared be- 
tween Alice and Bob. These modes are used as the local 
oscillators in the homodync detections at each site. Not- 
ing that neither (|0) a |1)b + |1)a|0)b)/\/2 nor \a) A \a) B 
can be used individually for violating a Bell inequality, 
it is unclear how it is possible to do so using such re- 
sources. The resolution of the puzzle is that a pair of 
correlated coherent states \a)A\ot)B, much like the state 
|+)a|+)b discussed above, activates the entanglement of 
the two-mode single photon state. 

An experimental demonstration of nonlocality using 
the two-mode single photon state can also be described 
as in Babichev et al. (2004). Rather than treating the 
local oscillators as coherent states, they are treated as 
correlated classical phase references. In this case, they 
constitute an additional resource that "lifts" the restric- 
tion of the local photon-number superselection rule, and 
the state (|0)a|1)b + \1)a\0)b)/V^ becomes unambigu- 
ously entangled. These two alternative descriptions are 
equally valid; see Bartlett et al. (2006b). 

The existence of such activation processes also resolves 
a controversy concerning the source of entanglement in 
the experimental realization of Furusawa et al. (1998) of 
continuous-variable quantum teleportation. Again, it is 
illustrative to consider two different perspectives of this 
experiment. 

The first perspective is a variant of the one presented 
by Rudolph and Sanders (2001b). In our language, it can 
be synopsized as follows. Alice and Bob are presumed to 
be restricted in the operations they can perform by a local 
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photon-number superselection rule. They share a two- 
mode squeezed state I7) = yl — 7 2 X^^Lo 7™l n i n ) where 
< 7 < 1. In addition, they share two other modes pre- 
pared in a product of correlated coherent states |a)|a). 8 
The former is the purported entanglement resource in 
the teleportation protocol, while the latter is a quantum 
version of a shared phase reference. These states are anal- 
ogous to (|0} A |l)B + |l)A|0} B )/v / 2and \+)a\+)b respec- 
tively - neither can be used as a resource for teleportation 
when considered on its own. So the question arises as 
to how teleportation could possibly have been achieved. 
The answer is that the product of coherent states acti- 
vates the entanglement in the two-mode squeezed state. 9 

The second perspective is one wherein the shared phase 
reference is treated classically; this perspective was taken 
in Furusawa et al. (1998). As described above, this classi- 
cal shared phase reference acts as a resource that lifts the 
superselection rule, and causes the two-mode squeezed 
state to become unambiguously entangled. 

An analogue of multi-copy entanglement distillation 
can also be demonstrated in our quantum optical exam- 
ple. Two copies of the state (\0} A \1) B + \1) A \0) B ) / V2 
can be used to obtain free entanglement (i.e., not bound) 
in the presence of the SSR, whereas only one copy can- 
not. The protocol, introduced in Wiseman (2003) and 
discussed in greater detail in Vaccaro et al. (2003), is as 
follows. As in the activation example above, Alice and 
Bob both perform a quantum non-demolition measure- 
ment of local photon number (on both local modes) and 
post-select the case where they both find a local photon 
number of one. The resulting state is 

nf ®nf[^(|o) A |i) B + |i) A |o) B )r 

cx -±=(101)^10)5 + |10)a|01) b ) , (3.32) 

where \ip}® 2 = \ip)\ip) . A process very similar to this 2- 
copy entanglement distillation has been demonstrated in 
quantum optics experiments (c.f. Ou and Mandel (1988); 
Shih and Alley (1988)), where correlated but unentangled 
photon pairs from parametric downconversion were made 
incident on the two input modes of a beamsplitter, so 
each photon transforms to a state of the form (|0)a|1)b + 
|1)a|0)_b)/\/2- Subsequently, measurements on the two 
output modes are postselected for one photon detection 
at each output mode. The fact that their postselected 
results are consistent with a description of an entangled 
state demonstrates that the entanglement of the state 



8 The state assigned by Rudolph and Sanders (2001b) is simply 
a mixed version (mixed over the phase of the pump beam) of 
\-y)\a)\a). 

9 van Enk and Fuchs (2002a) suggest a similar protocol to the 
one we describe here, for the mixed states discussed in the pre- 
vious footnote. Homodync measurement is performed on the 
pump beam with respect to an external phase reference, and the 
measurement result will yield a two-mode squeezed state that is 
unambiguously entangled with respect to this external RF. 



(|0)a|1)b + |1)a|0)b)/\/2 has been distilled by making 
use of two copies. 

Finally, we consider the analogue of multi-copy en- 
tanglement distillation from two copies of the two-mode 
squeezed state I7) = \/l — 7 2 J2^=o 7™l n i n )- Homodyne 
measurements by Alice and Bob (relative to their uncor- 
rected local oscillators) can be performed on one copy 
of this state to establish a shared phase reference, which 
then lifts the superselection rule and causes the second 
copy to become unambiguously entangled. 



3. Quantifying bi-partite entanglement without a shared 
reference frame 

As we have seen above, operational notions of entan- 
glement for a bipartite pure state no longer coincide when 
parties do not share a reference frame. How, then, docs 
one quantify the amount of entanglement of a bipartite 
state in such a situation? Entanglement measures can 
be defined in the presence of such a restriction again 
by being operational. In the following, we discuss one 
such operational measure which quantifies the distillablc 
entanglement under a local Abelian superselection rule. 
(This measure is directly related to the entanglement 
of particles (Wiseman and Vaccaro, 2003).) We note 
that these results apply directly to a general (possibly 
non-Abelian) SSR, with local operations restricted as in 
Eq. (2.17) (Bartlett and Wiseman, 2003); however, for 
simplicity, we focus here on the Abelian case. 

We continue with the scenario of the previous section. 
Consider a bipartite state pab shared by Alice and Bob 
and defined relative to Charlie's phase reference. We 
assume that in addition to this bipartite system, Alice 
and Bob each possess a number of quantum registers, not 
subject to any SSR, with total Hilbert space dimension 
equal to or greater than that of their respective systems. 
(For example, these registers could be standard qubits 
over which Alice and Bob have complete control.) These 
registers are initiated in a pure product state qab- 

The entanglement in the presence of an SSR of the 
state pab is quantified through a measure -Essr, which 
is defined by the maximum amount of entanglement that 
Alice and Bob can produce between their quantum reg- 
isters using local U(l)-invariant operations and classical 
communication (U(l)-LOCC). The latter can be quan- 
tified by an appropriate standard measure E; it seems 
most appropriate to use the entanglement of distillation. 

We now prove that the entanglement in the pres- 
ence of an SSR, Essr(pab), is given by the entan- 
glement E(U\ oc [pab]) that they can produce from the 
state U\ oc [pab\ by unconstrained LOCC, where U\ oc = 
U A ®U B - 

The proof is illustrative, so we present it here. Let 
O = {O} be the set of all LOCC operations by Alice and 
Bob that commute with U\ oc . Note that, for any quantum 
operation £ , the composite operation £ = hi\ oc o £ o U\ oc 
is in the set O. Let O £ O be some operation on the 
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initial state pab <8> Qab ■ The final state of the registers 
is given by g' AB = Tr sys (O [pab ® Qab}), where the trace 
is over the shared system. The maximum entanglement 
produced between the registers is given by maximizing 
E(g' AB ) over all operations in O. Thus, 

Essr(pab) 

= max E(Tr sys (0[p A B ® Qab])) 

= max E(Tr aya ((li loc o O oU loc )[p AB <g> £ab])) 

= max £(Tr sys ((Z4, c ° £ oZ4, c )[p A B ® 0Ab])) 

= max E(Tr sys (£ [U loc [p AB ] ® <?ab] )) , (3.33) 

where the second line follows from the properties of the 
trace and by applying the definition (2.7) to Ua and Ub, 
and the last line follows from the properties of the trace. 
The latter maximization is over all LOCC (not just op- 
erations that commute with Ui oc ), and gives the entan- 
glement E(U\ oc [pab]) that Alice and Bob can produce 
between their registers from the state U\ oc [pab] by un- 
constrained LOCC. 



4. Extensions and application to other systems 

The general perspective discussed above for investigat- 
ing entanglement without a shared reference frame can be 
applied to other situations, although for the most part, 
this issue has not been explored. Condensed matter sys- 
tems is one area where these results can be directly ap- 
plied, because these systems possess a number of prac- 
tical restrictions on operations. Local particle-number 
superselection rules often apply in practice; for example, 
as noted by several authors, the single-electron two- mode 
Fock state (|0)a|1)b + |1)a|0)b)/\/2 has ambiguous en- 
tanglement properties under this restriction (Beenakker, 
2005; Dowling et al, 2006; Samuelsson et al., 2005; Wise- 
man and Vaccaro, 2003). For this reason, most proposals 
for creating bi-partite entangled states make use of spin 
or orbital angular momentum degrees of freedom of mul- 
tiple particles (Beenakker et al, 2003; Samuelsson et al, 
2003, 2004). We note, however, that the two- mode single- 
electron Fock state is an entanglement resource akin to 
the two-mode single-photon state, which we have shown 
to be useful through activation or multi-copy entangle- 
ment distillation; also, a suitable shared U(l) reference 
frame could "lift" the restriction of the superselection 
rule, and the two-mode single-electron Fock state would 
be unambiguously entangled with such a resource. (De- 
termining a suitable quantum state of such a shared U(l) 
RF consisting of fermions is an outstanding problem in 
general. The 2-copy entanglement distillation protocol 
described above applies equally well to fermionic states 
of the form (|0)a|1)b + |1) a\0)b)/V2. The activation 
protocols described above, however, do not appear to 
have precise fermionic analogues; specifically, there are 
several challenges in defining an analogue of the optical 



coherent state for fermions. See Dowling et al. (2006).) 
Moreover, entangled states between angular momentum 
degrees of freedom of different particles will yield no real 
advantage over the two-mode single-electron Fock state 
in situations wherein there is a local SU(2) superselec- 
tion rule. Such a superselection rule will be in force, for 
instance, if the parties fail to share a Cartesian frame for 
spatial orientations. As with quantum optical systems, 
such considerations emphasize the need to be operational 
when classifying or quantifying entanglement. 

The theory of entanglement for indistinguishable par- 
ticles is another situation where considerations of en- 
tanglement without a shared reference frame are rele- 
vant. States of indistinguishable particles can appear 
entangled due to the necessary symmetrization or anti- 
symmctrization of the wavefunction. For example, in the 
position representation of two indistinguishable particles, 
a wavefunction of the two particles is expressed as 

V>12(xi,X 2 ) = -^=(V'l(xi)V'2(x2) ± Vl( x 2)V'2(xi)) , 

v2 

(3.34) 

where the ± cases correspond to bosons and fermions. 
The entanglement properties of such a state are the sub- 
ject of some debate (Dowling et al, 2006; Paskauskas and 
You, 2001; Schliemann et al., 2001; Wiseman and Vac- 
caro, 2003). From the perspective of this review, one 
can view the indistinguishability of particles as a lack 
of a reference ordering, i.e., lack of a reference frame to 
uniquely label the particles (Bartlett and Wiseman, 2003; 
Eisert et al, 2000; Jones et al, 2005, 2006; von Korff and 
Kempe, 2004). For example, if the particles described 
in the above state were distinguishable through another 
degree of freedom, such as their spin, then the entangle- 
ment of the above state would be unambiguous. Thus, in 
many condensed matter systems, it may be worthwhile 
to consider the possibility of "lifting" the restriction of 
indistinguishability, viewed as a lack of a reference or- 
dering, through an appropriate reference frame. (Such a 
reference frame would necessarily make use of some phys- 
ical degrees of freedom to uniquely label the particles.) 

D. Private shared reference frames as cryptographic key 

Two parties, Alice and Bob, are said to possess a pri- 
vate shared RF for some degree of freedom if their refer- 
ence frames are perfectly correlated with each other, and 
are completely uncorrelated with any other party. Such 
private shared RFs can be used as a novel kind of key 
for cryptography. To illustrate the general idea, consider 
the case where Alice and Bob share a private Cartesian 
frame. 10 They can achieve some private classical commu- 



Although it is difficult to imagine how a Cartesian frame de- 
fined by the fixed stars might be made private, it is clear that 
if the Cartesian frame is defined by a set of gyroscopes, privacy 
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nication as follows: Alice transmits to Bob an orientable 
physical system (e.g., a pencil or a gyroscope) after en- 
coding her message into the relative orientation between 
this system and her local reference frame (for instance, 
by turning her bit string into a set of Euler angles). Bob 
can decrypt the message by measuring the relative orien- 
tation between this system and his local reference frame. 
Because an eavesdropper (Eve) does not have a reference 
frame correlated with theirs, she cannot infer any infor- 
mation about the message from the transmission. 

We shall consider the quantum version of this exam- 
ple, where Alice sends spin- 1/2 particles to Bob via a 
noiseless channel, as in the communication problem of 
Sec. III. A. 2. Note that whereas in that problem Bob 
lacked the RF with respect to which the spins were pre- 
pared, here Bob shares the RF and it is Eve who lacks it. 
Thus, the superoperator £ N of Eq. (3.2) now describes 
the restriction that Eve faces by virtue of lacking the pri- 
vate shared RF. In Sec. III. A. 2 we sought to determine 
how Alice could encode information in such a way that 
it remained accessible to someone who lacked her RF, 
whereas here we are interested in the opposite problem: 
how to encode information in such a way that it is inac- 
cessible to someone who lacks her RF (but accessible to 
someone who has it). We follow Bartlctt et al. (2004a), to 
which the reader is directed for a more complete analysis. 

A few points are worth noting before presenting the 
results. First, private communication using a private 
SRF is similar in some ways to private-key cryptography, 
specifically, the Vernam cipher (one-time pad). For ex- 
ample, the secret key in the Vernam cipher can be used 
only once to ensure perfect security. Similarly, for our 
communication schemes, only a single plain-text (classi- 
cal or quantum) can be encoded using a single private 
SRF. If the same private SRF is used to encode two 
plain-texts, then the relation that holds between the two 
cipher-texts carries information about the plain-texts, 
and because it is possible to learn about this relation 
without making use of the SRF, Eve can obtain this in- 
formation. This is akin to the fact that in our example 
of the classical pencil or gyroscope, Eve can measure the 
angular separation of the two pencils. 

This analogy prompts us to raise and dismiss the pos- 
sibility that a private SRF is equivalent, as a resource, 
to some amount of secret key or entanglement. It is true 
that a private SRF may, through public communication, 
yield secret key. Conversely, as will be seen in Sec. V.J, 
a secret key may, through public communication, yield 
a private SRF. Moreover, if, contrary to what has been 
assumed here and in Sec. V.J, the parties possess a public 
SRF, then a private SRF is equivalent to an unbounded 
amount of secret key (in practice, the size of the key 
is limited by the bounded size of the physical systems 



that define the SRF or the bounded degree of correla- 
tion in the SRF). For instance, the parties can measure 
the Euler angles relating the private SRF to the public 
SRF and then express these in binary to obtain secret 
bits. Nonetheless — and this is the critical point — in 
the absence of either a public SRF or public communi- 
cation of unspeakable information, there is no procedure 
for interconverting secret key and private SRF. Thus the 
two resources are not equivalent. Similarly, one can show 
that the resource of a private SRF is distinct from that 
of entanglement. 

a. One qubit. Consider the transmission of a single qubit 
from Alice to Bob. As they share an RF, Bob represents 
states of this single qubit in the same way as Alice. On 
the other hand, Eve, who does not share Alice's RF, de- 
scribes the state p as £i(p) — \l, as in Eq. (3.4). She 
consequently cannot correlate the outcomes of her mea- 
surements with Alice's preparations. It follows that using 
this single qubit and their private shared RF, Alice and 
Bob can privately communicate one logical qubit, and 
thus also one logical classical bit. 

b. Two qubits: Decoherence-full subspaces. If multiple 
qubits are transmitted, it is possible for Eve to acquire 
some information about the preparation even without 
access to the private shared RF by performing rela- 
tive measurements on the qubits. For two transmit- 
ted qubits in the state p, Eve's description is Ei{,p) = 
Pj=i(^Hj=i) + Pj=o^lj=o a s in Eq. (3.11). Despite not 
sharing the RF, Eve can still discriminate the singlet and 
triplet subspaces and thus acquire information about the 
preparation. Nonetheless, Alice can achieve some pri- 
vate quantum communication by encoding the state of a 
qutrit (a 3-dimensional generalization of the qubit) into 
Hj=i, the triplet subspace. Bob, sharing the private RF, 
can recover this qutrit with perfect fidelity. However, Eve 
identifies all such qutrit states with giTj = i, and therefore 
cannot infer anything about Alice's preparation. 

The property of Wj=i that is key for this scheme is 
that the two-qubit superoperator £2 is completely depo- 
larizing on it, as seen explicitly from Eq. (3.10), which we 
repeat: £2 — (T>M j=1 °'Pj=i)+'Pj=o- We define subspaces 
with this property to be decoherence-full subspaces, con- 
sistent with the terminology presented in Sec. II. C. 

Now consider how many classical bits of information 
Alice can transmit privately to Bob. An obvious scheme 
is for her to encode a classical trit as three orthogonal 
states within the triplet subspace. However, this is not 
the most efficient scheme. Suppose instead that Alice 
encodes two classical bits as the four orthogonal states 

|i) = I|^-) + ^|n i )|n i ) ) i = l,..., 4, (3.35) 



amounts to no other party having gyroscopes that are correlated 
with those of Alice and Bob. 



where \tp ) is the singlet state and the |n^) |rij) are four 
states in the triplet subspace with both spins pointed in 
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the same direction, with the four directions forming a 
tetrahedron on the Bloch sphere; specifically, 

|ni) = |0), (3.36) 
|n 2 ) = -^(|0)+V2|l)), (3.37) 

|n 3 ) = --^(|0)+ e 2 ™/V2|l)), (3.38) 

|n 4 H-^(|0)+e- 2 -/V2|l>), (3.39) 

as in Massar and Popescu (1995). It is straightforward 
to verify that 

S 2 (\i)(i\) = \l, Vi, (3.40) 

i.e., all four states are represented by Eve as the com- 
pletely mixed state. As these four states are orthogonal, 
they are completely distinguishable by Bob and so pro- 
vide an optimal private classical communication scheme. 

c. Three qubits: Decoherence-full subsystems. Consider 
the case where Alice transmits three qubits to Bob. The 
Hilbert space HfJ 2 and the superoperator £ 3 decompose 
into irreps as 

(H 1/2 )® 3 = W j=3/2 (M j=1/2 ® Af 1=1/2 ) , (3.41) 

8 4 2 2 

and 

£3 = V Mj=3/2 o ^j=3/2 

+ {T>M i=1/ * ® Z* j=1/2 ) ° Vj=i/2 , (3-42) 

as in Eqs. (3.16) and (3.17). Clearly, the four-dimensional 
subspace Hj = 3/ 2 is a decoherence-full subspace. We also 
see that any state on Hj— 1/2 that is of the product form 
cr with respect the factorization Hj— 1/2 — -Mj—i/2 ® 
■A/}=i/2 i s mapped by £3 to the state \lM j=1/2 ® CT ( scc 
also Eq. (3.18)). Thus, every state of the virtual subsys- 
tem M.j=i/2 is mapped to the completely mixed state on 
that subsystem. Such a subsystem is an example of a 
decoherence-full subsystem. 

Alice can therefore achieve private communication of 
two qubits using the decoherence-full subspace Hj=3/ 2 
or a single qubit using the decoherence-full subsystem 
■Mj—i/ 2 . Note, however, that for greater numbers of 
transmitted qubits, the decoherence-full subsystems typ- 
ically have greater dimensionality than the decoherence- 
full subspaces, and schemes that encode within them are 
necessary to achieve optimal efficiency, as discussed be- 
low. 

For private classical communication, the question of 
optimal efficiency is much more complex. One scheme 
would be for Alice to encode two (classical) bits into 
four orthogonal states within the j = 3/2 decoherence- 
full subspace. Alice can also encode two bits into four 



orthogonal maximally entangled states on the virtual 
tensor product M.j=\j 2 ®Nj=i/ 2 , because the depolar- 
ization on Aij—1/2 is sufficient to map all of these to 
\^M j=1/2 ® 1-^=1/2! making them indistinguishable to 
Eve/ 

It turns out that the optimally efficient scheme for 
private classical communication uses both the j = 3/2 
and j = 1/2 subspaces. Let \j=3/2,fi), ll = 1,...,4 
be four orthogonal states on the j = 3/2 subspace, and 
let 1.7=1/2, fj,), fi = 1, ... ,4 be four maximally entangled 
states (as described above) on the j — 1/2 subspace. De- 
fine the eight orthogonal states 

\b,») = ±= (1.7=3/2, M ) + (-1) 6 | j=l/2, M » , (3.43) 

where 6=1,2 and ll = 1, . . . , 4. Alice can encode 3 bits 
into these eight states, which are completely distinguish- 
able by Bob. It is easily shown that the decohering su- 
peroperator £3 maps all of these states to the completely 
mixed state on the total Hilbert space; thus, these states 
are completely indistinguishable from Eve's perspective. 

d. General results. In general, an optimally efficient pri- 
vate quantum communication scheme for N spin-1/2 sys- 
tems is given by encoding into the largest decoherence- 
full subsystem for £m of Eq. (3.2). The largest is Mj = N/ 2 
and has dimension N + 1. Thus, given a private Carte- 
sian frame and the transmission of N qubits, Alice and 
Bob can privately communicate \og 2 {N + 1) qubits. 

The general results for private classical communication 
are much more complex, and beyond the scope of this 
review. (Observe the complexity of even the three-qubit 
example above.) Here, we simply state the result, which 
is that the number of private classical bits that can be 
communicated using a private shared Cartesian frame 
and N qubits is 3 log 2 N (Bartlett et al, 2004a). 

These results show that, asymptotically, the private 
classical capacity (3 log 2 N) is three times the private 
quantum capacity (log 2 N). By relaxing the requirement 
of perfect privacy, it is possible to use the properties of 
random subspaces to nearly triple the private quantum 
capacity, almost closing the gap between the private clas- 
sical and quantum capacities (Bartlett et at, 2005). Fi- 
nally, we note in passing that bipartite entangled states of 
2A^ spins, completely mixed on the total- J=0 subspace, 
have been identified as a resource for private quantum 
and classical communication; it is illustrative to view 
such states as quantum private shared RFs (Livine and 
Terno, 2006). 

IV. QUANTUM TREATMENT OF REFERENCE FRAMES 

As we have seen in the previous two sections, the lack 
of a reference frame has the effect of inducing a superse- 
lection rule. We have explored examples of how the lack 
of a phase reference in quantum optics experiments leads 
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to an Abelian SSR and how the lack of a Cartesian frame 
leads to a non- Abelian SSR. 

However, some SSRs are typically viewed as being 
axiomatic; a canonical example is a SSR for electric 
charge, which forbids superpositions of eigenstates of dif- 
ferent charge (Strocchi and Wightman, 1974; Wick et al, 
1952, 1970). In a classic paper, Aharonov and Susskind 
(1967) challenged the necessity of this SSR, and outlined 
a gedanken experiment for exhibiting a coherent super- 
position of charge eigenstates as an example of how this 
SSR can be obviated in practice. This gedanken exper- 
iment highlights the requirement of an appropriate ref- 
erence frame in order to exhibit superpositions between 
eigenstates of superselected quantities, and as a result it 
can be argued that an SSR is simply a practical limita- 
tion due to the lack of such a reference frame. This point 
has been repeated by several authors (Giulini, 2000a, b; 
Lubkin, 1970; Mirman, 1969, 1970). 

In this section, we demonstrate that this result is gen- 
eral: any SSR associated with a unitary representation 
of a compact group can be viewed as the lack of an ap- 
propriate reference frame, and can be overcome by using 
an appropriate quantum system to serve as a reference 
frame. 



A. Relational descriptions of phase 

1. Quantization of a phase reference 

Suppose we have a system that transforms under U(l) 
and where the associated eigenstates are denoted by \n). 
For concreteness, we shall imagine these to be eigenstates 
of photon number, or of number of bosonic atoms, in 
some mode. If there is no SSR for U(l), then we can 
prepare states such as 

l^o) = (|0) + |l»/V2, (4.1) 
hM = (|0>-|l»A/2, (4.2) 

which differ only in their phases. We distinguish such a 
state, which has coherence between |0) and |1), from the 
incoherent mixture 1/2 = i |0> <0j + by measuring 

an ensemble of such systems in the basis {\tpo}, IVv)} and 
observing whether the outcome is random or not. 

Now suppose instead that there is a SSR for U(l) in 
force for this system. For optical systems, this corre- 
sponds as discussed above to the situation where one 
lacks the phase reference with which these states were 
prepared. If the states |n) are eigenstates of bosonic atom 
number (such as are used in describing Bose-Einstein con- 
densates), then such a SSR is often assumed to be an ax- 
iomatic restriction (cf. Cirac et al. (1996); Leggett (2001); 
Wick et al. (1952); Wiseman and Vaccaro (2003)). In ei- 
ther case, it becomes impossible to prepare a coherent su- 
perposition of eigenstates of total number. Nonetheless, 
it is still possible to prepare a pair of systems in such a 
way that they have a well defined relative phase (Nemoto 



and Braunstein, 2003). We consider the pair consisting 
of our original system, which we denote by S, and a new 
system, which we denote by R. Defining the states 

|Xu(ti-))-R = 

(\n-l) R ±\n) R )/V2, (4.3) 

on R (with n > 1), we may then define states on the pair 
with relative phases and tt respectively, 

\*o)rs = (\xo)r\^o)s - \x«)r\^)s)/V2, (4.4) 
|**>fts = (\xo)r\^)s - \x*)r\tPo)s)/V2- (4.5) 

Noting that these states can also be expressed as 

\*o)rs = (|n)fl|0)s + |n-l) fl |l)s)/>/2, (4.6) 
|**>fls = {\n) R \0) s ~\n- 1} R \1) S )/V2, (4.7) 

it is clear that both of these states are eigenstates of 
total number with eigenvalue n and arc therefore valid 
preparations under the SSR. 

Moreover, within the eigenvalue n eigenspace, one can 
measure the basis {|^o) j I^tt)} in order to statistically 
distinguish states with a well-defined relative phase from 
those, like \ \n + 1) (n + 1| <8> |0) (0| + \\n) (n| <g> |1) (1|, 
which do not have a well-defined relative phase. Clearly, 
this measurement is also valid within the constraints of 
the SSR. 

In fact, for every preparation, operation and measure- 
ment of the system that is not U(l)-invariant, one can 
find an equivalent preparation, operation and measure- 
ment for the relation between the pair of systems that is 
U(l)-invariant. To do so, we simply use the map 

|0>->|n) fl |0) s 

|l)^|n-l) fl |l) s , (4.8) 

so that in particular, we have 

o|0) + 6|1) -> a\n) R \0) s + b\n - 1) R \1) S , (4.9) 

for \a\ 2 + \b\ 2 = 1. 

It is straightforward to generalize the quantization map 
of Eq. (4.8) to the case of a system which may have more 
than one photon. If it has at most m max photons, we 
simply use the map 

\m) — > \n — m) R \m) s (4-10) 

where we require that n > m max . In this case, 

^2 Cm\m) -> ^2 c m \n-m) R \m) s ■ (4.11) 

m— m— 

This extension of the Hilbert space corresponds phys- 
ically to incorporating the phase reference into the quan- 
tum formalism. In other words, it describes the inter- 
nalization or quantization of the reference frame. To see 
this, consider the following analogy with classical me- 
chanics. Suppose a ball is bounced off of a wall. If we do 
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not treat the wall as a dynamical entity, but rather as an 
external potential that appears in the equations of mo- 
tion of the ball, then the solutions to the equations of mo- 
tion arc not translationally- invariant. Specifically, if wc 
take a given bouncing trajectory for the ball and trans- 
late it in such a way that the bounce no longer coincides 
with the location of the wall, we do not obtain another 
solution - the external potential breaks the translation- 
invariance. However, if we internalize the wall, that is, 
treat its position as a dynamical degree of freedom, then 
we find that the equations of motion, and the solutions, 
will be invariant under translations of the entire system 
(consisting of the ball and the wall). 

Similarly, when one writes down a state such as 
l^ofir)) = (|0) i |l))/v / 2, the phase of this state is only 
defined relative to an external phase reference. We can 
view this external phase reference as a type of external 
potential, which provides the means for preparing states 
and performing operations (i.e., giving solutions to the 
quantum-mechanical equations of motion) that are not 
invariant under phase shifts. However, if we incorporate 
the phase reference as an internal system (and we do 
not compare our internal systems to any other external 
phase reference), then the only empirically meaningful 
states and operations are invariant under phase shifts of 
the entire system (including the internalized phase refer- 
ence). 

Whether one treats the wall in our classical example 
as an external potential or an internal dynamical system 
is a choice of the physicist. Similarly, one can treat a ref- 
erence frame internally or externally; with either choice, 
one can obtain an empirically adequate description of the 
experiment (Bartlett et al, 2006b). 



2. Dequantization of a phase reference 

It is useful to consider the opposite problem to the 
one considered above, namely, given a description of an 
experiment wherein the phase reference is being treated 
internally, how does one obtain a description wherein it 
is treated externally? In our classical example of a ball 
bouncing off a wall, this involves finding the equations of 
motion for the relative position of the ball to the wall. 

We would like to determine the quantum analogue of 
this process. In the context of a quantum reference frame 
for spatial location, it is relatively straightforward. To 
externalize the reference frame, one defines a novel ten- 
sor product structure of the Hilbert space in terms of 
the commuting pair of obscrvablcs qn — qs and pr+ps, 
where qn,Pn and qs,Ps are the position and momentum 
operators for the reference frame and system respectively. 

The procedure is a bit more subtle in our U(l) exam- 
ple, but also involves identifying a novel tensor product 
structure of the Hilbert space. The original tensor prod- 
uct structure, corresponding to the reference frame and 
system division, will be denoted H — Hr <g> Hs- The 
product states with respect to this structure, \n) R \ m) s , 



are simultaneous eigenstates of Nr, the number operator 
for R, and Ns, the number operator for S with eigenval- 
ues n and m respectively. The operators Nr and Ns form 
a complete set of commuting operators for the Hilbert 
space H. 

By choosing a different complete set of commuting op- 
erators, we can define an alternate tensor product struc- 
ture for the Hilbert space. Specifically, we choose Ns, 
the number operator for S, and N iot = Ns + Nr, the to- 
tal number operator. The state \m)R\n)s is also a joint 
eigenstate of this pair, with eigenvalues m and to + n 
respectively. Given that Ns and iV to t form a complete 
set of commuting observables, we may label an element 
of the basis {\n)R\m}s} instead by the eigenvalues of Ns 
and iV to t, that is, \n} R \m) s = \N tot = m + n,N s = m). 

Now, if it were the case that any pair of values, one 
drawn from the spectra of Ns and the other drawn from 
the spectra of iV to t , could be simultaneous eigenvalues of 
Ns and iV to t, then we could define a new tensor product 
structure by |iV to t = l,N$ — m) = \l) <g> \m). However, 
any pair (I, m) with to > I cannot be simultaneous eigen- 
values. This problem can be resolved by restricting our 
attention to states \n)R\m)s where the minimum value 
of n is larger than the maximum value of m. Recall- 
ing the physical significance of these eigenvalues, we see 
that this corresponds to assuming that the RF has more 
excitations than the system. 

Assuming a system with at most m max excitations, 
and a reference with a number of excitations that is 
at least TO max , we may focus upon the subspace H' = 
span{ | n) R \ m) s ,m = 0, .. . ,m max ,n > m max }. It is then 
straightforward to introduce a tensor product structure 
on H' as follows. Wc define an m max -dimensional Hilbert 
space H re i with an orthonormal basis |m) re i labeled by 
the eigenvalue to of Ns- We call this the relational 
Hilbert space. We also define a Hilbert space H g i with an 
orthonormal basis |Z) g i labeled by the eigenvalue of N tot . 
We call this the global Hilbert space. We then have a 
vector space isomorphism 

W'^WglOWrel, (4.12) 

which is made by identifying 

|Z)gi|m}rci = \N tot =l,N s =m) , (4.13) 

for all to < TO max and I > TO max . 

We can therefore define a linear map from the subspace 
H' of Hr ® Hs to H g \ Cg) H le i in terms of their respective 
basis states as 

\ n )R \ m )s ^ \ m + n )gl| n )rcl • (4-14) 

Under this map, we have 

a \n + 1) R \0) s + b\n) R \l) s h-> |n) g] ® (a|0) rc i + &|l) re i) • 

(4.15) 

Any U(l)-invariant state on Hr®Hs will lead to a state 
on H le \®Hfr\ that commutes with N to t, i-e., the state will 
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be diagonal in the number basis of H g \. By discarding 
the global degrees of freedom and considering only the 
reduced density matrix on H TC i, we are essentially mov- 
ing to a paradigm of description wherein the RF is not 
treated within the quantum formalism. We call this pro- 
cedure externalizing or dequantizing the reference frame. 
For instance, if we follow the map of Eq. (4.15) by a trace 
over H g i, we obtain the map 

a \n + 1) R \0) s + b\n) R \l) s h-» a|0) rcl + 6|l) re i , (4.16) 

which is the inverse of Eq. (4.9), the map describing the 
internalization or quantization of the phase reference. 

3. The optical coherence controversy 

This simple analysis of the quantum treatment of refer- 
ence frames is useful for resolving a controversy concern- 
ing whether quantum coherences between photon number 
eigenstates are fact or fiction (Bartlett et al., 2006b; van 
Enk and Fuchs, 2002a, b; Fujii, 2003; Gea-Banacloche, 
1998; Molmer, 1997, 1998; Nemoto and Braunstcin, 2002, 
2003, 2004; Rudolph and Sanders, 2001a,b; Sanders et al, 
2003; Smolin, 2004; Spekkens and Sipe, 2003; Wiseman, 
2003, 2004). It is standard practice in quantum optics 
to model the state of the electromagnetic field generated 
by a laser to be a coherent state, which is a coherent 
superposition of photon number eigenstates. One justifi- 
cation that may be given for such an approach is that if 
one imagines the source of the radiation to be a classical 
oscillating dipolc (which seems a reasonable assumption) 
then a simple calculation shows that the field is left in 
a coherent state. On the other hand, if one quantizes 
the dipole moments in the gain medium and assumes 
that these are initially in a thermal state (which must 
have zero expectation value of the dipole moment opera- 
tor) , and that the coupling between the gain medium and 
the radiation field conserves photon number (which again 
seem like reasonable assumptions) , then the reduced den- 
sity operator of the field is found to be in an incoherent 
mixture of photon number eigenstates (Molmer, 1997). 
The fact that distinct states are obtained by the two 
analyses has led many researchers to conclude that the 
two descriptions are inconsistent and that one must be 
wrong. 

To gain insight into this controversy, it is useful to con- 
sider the gain medium as a phase reference for the radia- 
tion field. Rather than considering this case in detail, we 
return to the example of the previous section, which pro- 
vides a simplified version of the controversial phenomena. 
Recall that we also considered two distinct paradigms of 
description for a system S and a phase reference R. In 
the first description - the external-R paradigm - only 
S was treated quantum mechanically, so that the total 
Hilbert space was Hs- In the second description - the 
internal-R paradigm - both S and R were treated quan- 
tum mechanically, so that the total Hilbert space was 
Hs ® Hr- Moreover, the state on Hs is different in the 



two cases. For instance, if the state of S in the external- 
R paradigm is |-0o) = (|0) + |1))/V2 of Eq. (4.1), after 
internalizing R, the joint state is |*o) 01 Eq. (4.6), and 
the state on H s is ||0)(0| + 

Thus, just as the classical and quantum treatments of 
the gain medium in the generation of laser light led to 
distinct state ascriptions for the radiation field, our clas- 
sical and quantum treatments of the phase reference R 
lead to distinct state ascriptions for the system S. It is 
a mistake however to conclude that the two descriptions 
are inconsistent. As we saw in the previous subsection, 
both descriptions are valid. To resolve the confusion ex- 
plicitly, we elaborate on the physical interpretation of the 
states in these Hilbert space. 

In the external- R paradigm, we saw that the phase of 
the quantum state of S (that is, the phase of the ratio 
of amplitudes of |0) and |1)) can only be given meaning 
relative to the external phase reference R. So it is clear 
that the state on Hs describes not just the intrinsic prop- 
erties of S, but some of its extrinsic properties as well, 
specifically, its relation to R. 

In the internal- R paradigm, any phase of the quantum 
state of S can also only be given meaning relative to an 
external phase reference, but R is no longer an external 
RF, and any phase reference that is still treated exter- 
nally, say R', has been assumed not to be correlated with 
S. Thus, we expect S to not have a well-defined phase in 
this case. The point is that in the internal- R paradigm, 
Hs also describes extrinsic properties of S, but in this 
case it is the relation of S to R' , rather than R. 

Thus, the fact that the quantum states on Hs are dis- 
tinct in the two paradigms is not an inconsistency be- 
cause despite the common notation, they describe differ- 
ent degrees of freedom: one describes the relation of S to 
R and the other the relation of S to R' . 

Moreover, if one wishes to recover the quantum state 
describing the relation of S to R in the internal-i? 
paradigm, it is clear that one should not look at the quan- 
tum state on Hs because this amount to tracing over Hr 
which corresponds to ignoring R, and one clearly cannot 
ignore a system when one seeks to find the relation be- 
tween it and another. But where then is information 
about the relation between S and R found in Hs <g> Hr? 
The answer is that it is found in a virtual subsystem, 
specifically in the Hilbert space H IC \- The resolution of 
the optical coherence controversy is achieved in an anal- 
ogous manner. 

The key insight for resolving these sorts of confusions 
is that quantum states of systems in an external RF 
paradigm do not simply describe its intrinsic properties, 
but also the relation of the system to the external RF; 
further discussion on this issue can be found in (Bartlett 
et al., 2006b; Wiseman, 2004). 
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4. Generalization to composite systems 

The generalization of the quantization procedure in 
Sec. IV. A. 1 to the case of multiple systems (i.e., modes) 
is not so straightforward. The problem is that if we wish 
to describe a pair of systems Si and 5*2 relative to an 
RF R, then the reduced density operators on RSi and 
on i?S*2 cannot both be pure entangled states (Coffman 
et al., 2000). This fact is known as the monogamy of 
pure entanglement. As a result, the quantum description 
of RF and system that was presented above is only ade- 
quate if the system in question is the only one that will 
ever be compared to the RF. However, the most general 
notion of an RF is something with respect to which the 
orientation of many systems can be defined. We consider 
such a generalization presently. 

First, note that if we demand that there be no limit 
on the number of systems that can be correlated with 
the RF, and that the degree of correlation with the RF 
be equal for all the systems, then the reduced density 
operator on RS for an arbitrary system S must be un- 
entangled, that is, a separable state. At first glance, this 
might seem problematic, because it might seem that the 
entanglement in Eqs. (4.9) and (4.11) is critical for the 
RF quantization procedure to work. It is true that if we 
restrict ourselves to a subspace of TLr of the same dimen- 
sion as the system of interest, as we did in Eqs. (4.9) and 
(4.11), then we cannot obtain a faithful representation. 
However, by allowing ourselves to make use of a larger 
subspace, we can obtain a good representation, and in 
the limit of arbitrarily large dimension, we obtain a per- 
fect representation, as before. Defining the unnormalizcd 
states 

oo 

IX0>« = ]>> i0 >>«< (4.17) 

n=0 

which have well-defined phase, the quantization map 
takes the form 

P - f &<P\x*)r{xA ® U(<P)pUH<P) . (4.18) 

We must demonstrate that this is a faithful representa- 
tion of the system that satisfies the U(1)-SSR. Rather 
than doing so for the phase reference case individually, 
we proceed directly to present the generalization of this 
quantization map to an arbitrary group, and prove that 
the latter has the properties we desire. 

B. Quantization of a general reference frame 

Consider the quantum description of a system with 
Hilbert space Tis, in the case where one possesses an 
external reference frame for a degree of freedom associ- 
ated with the group G. The Born rule predicts that, 
for a preparation associated with density operator p fol- 
lowed by a transformation associated with operation £ 



and finally a measurement associated with the POVM 
{E k } k , the probability of the measurement outcome k is 
Tr[£(p)E k }. 

Now consider a quantum description for the same sys- 
tem, but where a SSR for G is in force. This SSR implies 
a restriction on the states, transformations, and measure- 
ments. However, as we now demonstrate, it is possible 
to append this system with another quantum system R 
which serves as a quantum reference frame in such a way 
that, although a SSR for G applies to the entire compos- 
ite system RS, the RF allows us to effectively describe 
the system as if the SSR did not exist (Kitaev et at, 
2004). 

Our aim is to map the elements of the old representa- 
tion (of preparations, operations, measurements) to ele- 
ments in a new, G-invariant representation on Hr (g> Tts- 
Thus, we seek a map 

p -+ p™ , (4.19) 
{E k } k -> {E' k nv } k , (4.20) 
£ -» £ inv . (4.21) 

such that p im = G(p inv ) and E k nv = G(E k m ) are both G- 
invariant operators on Hr^Hs, and £ mv is a G-invariant 
superoperator on B(Hr)®B(Hs) (this implies that when 
acting on a G-invariant operator A, £ mv satisfies (G o 
£ inv og)[A] =£ inv [A}). 

In addition, we would like this map to preserve the 
statistical predictions of the old representation; if all 
the statistics of the Born rule can be reproduced in this 
new representation, then it is equivalent to the old one. 
Specifically, we want this map to be such that 

TTR S [£ iav (p [nv )E'n = Tr s [£(p)E k ] , (4.22) 

for all states p, operations £ and measurements {E k } k . 
Such a map does exist (assuming we can allow oIr, the di- 
mension ofH.R, to be arbitrarily large), as we now demon- 
strate. 

First, the quantum system R that will constitute the 
RF for G must clearly transform under G in some non- 
trivial manner. Thus, TLr must carry a representation 
of G, denoted Ur, which in general will be reducible. In 
order for R to serve as a complete quantum RF for G, 
the state \g) on Hr corresponding to the configuration 
g e G must not possess a non-trivial invariant subgroup, 
i.e., if Uji(g')\g) cx \g) then g' must be the identity. It 
follows that the states of R transform as, 

UR(g')\g) = \g'g), V M 'eG. (4.23) 

For this quantum system to function as a perfect refer- 
ence frame for G, the different configurations \g) must 
all be distinguishable. Thus, we require that states for 
different configurations are orthogonal 

(gW) = %"V ) , (4-24) 

where 5(g) is the delta- function on G defined by 
/ dg6(g)f(g) = /(e) for any continuous function / of 
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G, where e is the identity element in G. The above re- 
quirements are the defining properties of the left regular 
representation of G. In the case of a Lie group, the di- 
mensionality of Hr must be infinite for such states to 
exist. We refer to such an infinite-dimensional quantum 
RF as unbounded. 11 

We now present the map from operators on Hs to G- 
invariant operators on Hr <g> Hs- 



$ : A 



[ dg\g){g\®U s (g)AUl(g), (4.25) 
Jg 



where Us is the representation of G on the system. 

Using this map $, we define the invariant versions of 
density operators, elements of POVMs and Kraus oper- 
ators respectively as 



f 



P = T~ 

UR 

E [nv = $(£), 
K inv = ${K), 



Hp), 



(4.26) 

(4.27) 
(4.28) 



where dR is the dimensionality of the Hilbert space H' R = 
spanjjg) , g e G} spanned by the orbit of the RF states, 
which may be a subspace of Hr. (One can easily check 
that Tr RS [p inv ] = 1 Tr s [p] = 1.) 

The following are properties of the $ map: 

1. $(A) is G-invariant; 

2. $(A + B) = ${A) + $(B) and $(AB) = $(A)$(B), 
so the algebra of operators is reproduced. 

The G-invariance of §(A) follows from 

(tW) ® U s (g'W(A)(U R (g') ® Ul(g')) 

= [ dg\g'g)(g'g\®U s (g'g)AUl(g'g) 
Jg 

= $(A) , (4.29) 

where the final equality follows from the invariance of the 
Haar measure dg. To prove property 2, we note that $ is 
linear by definition, and that 



$(A)$(B) = J dgdg'\g){g\g'){g'\ 

®Us(g)AUl(g)Us(g')BUi(g r ) 

= J dg\g)(g\®U s (g)ABUl(g) 

= $(AB) , (4.30) 

where we have used Eq. (4.24). 

From these properties, one can show that if p is a den- 
sity operator, then so is p mv , if {Ek} is a POVM, then 



so is {E k nv }, and that if £ is a superoperator with Kraus 
operators {K^} satisfying ^ K^K^ = E, then the su- 
peroperator £ mv having Kraus operators {K™ v } satis- 
fies E M ( i ^ nv ) t - ft: ; i nv = Einv - Most importantly, one can 
prove that the new representation satisfies Eq. (4.22) and 
therefore reproduces the quantum statistics: 

Tr R S {p™ En 

= d^Tr R s[$(p)$(E k )} 
= d R lr Tr RS [$( P E k )} 



= d^TrRs 

= d R^R 
= Tr s [pE k 



dg\g)(g\®U s (g)pE k ul(g) 



f dg\g)(g\ Tv s [ P E k ] 
Jg 



(4.31) 



For finite groups, one need only assume that (g\g') = <5 9lS ' where 



5 g g i is the Kronecker-delta. 



The case where there is a nontrivial operation £ can be 
dealt with similarly. 

This is a remarkable result. It proves that supers- 
election rules cannot provide any fundamental restric- 
tions on quantum theory. This has particular implica- 
tions for quantum cryptography as we discuss below. It 
also proves that all superselection rules associated with 
unitary representations of compact groups result from a 
lack of an appropriate reference frame, because, as we 
have shown, including an unbounded quantum reference 
frame reproduces a quantum theory that is equivalent to 
one in which the superselection rule does not apply. 



C. Are certain superselection rules fundamental? 

We now return to the question, introduced at the be- 
ginning of this section, of whether certain superselection 
rules are more fundamental than others. That is, arc 
certain SSRs axiomatic, as opposed to those which arise 
in practice when there is not an appropriate RF? This 
issue bears on several controversies that are the coun- 
terparts of the optical coherence controversy in other 
contexts. It has arisen in the context of coherence be- 
tween charge eigenstates in superconductivity (Anderson, 
1986; Haag, 1962; Kershaw and Woo, 1974) and of coher- 
ence between atom number eigenstates in Bose-Einstein 
condensation (Castin and Dalibard, 1997; Hoston and 
You, 1996; Javanainen and Yoo, 1996; Leggett, 2001; Yoo 
et al, 1997). Here, however, the intuition for the coher- 
ences being a fiction is based on the notion that the su- 
perselection rule for charge and for baryon number are 
axiomatic, so that any quantum state that violates this 
SSR docs not represent reality. 

To make the discussion definite, let us compare on the 
one hand quantities such as charge and baryon number, 
for which axiomatic SSRs are conventionally assumed to 
apply, and on the other, quantities such as linear momen- 
tum, angular momentum and photon number, for which 
SSRs are generally not assumed to apply. We wish to 
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consider whether our conclusion, that it is possible to ef- 
fectively lift a superselection rule, should apply to both 
of these equally. 

Certainly, the example of the phase reference provided 
in Sec. IV. A applies equally well in the case of atom num- 
ber (and thus baryon number) as it does to the case of 
photon number. In both cases, one can certainly create 
well-defined relative phases between a pair of systems. 
Moreover, the reasons for interpreting the larger of the 
two systems as a reference frame for the other are just as 
valid in the case of atom number as they are in the case 
of photon number. Finally, in both cases one can recover 
a description of the relational degree of freedom, wherein 
one effectively has lifted the SSR. 

Given the generalization to non-Abclian groups, pro- 
vided in Sec. IV. B, it would appear that all such su- 
perselection rules may be lifted in practice. Of course, 
the technical challenge in doing so is to build a refer- 
ence frame for the degree of freedom in question. Admit- 
tedly, it may be more difficult to construct good reference 
frames for some degrees of freedom, but there is nothing 
in principle preventing their construction. For instance, 
to lift the superselection rule associated with charge, one 
must simply have a large reference system with respect 
to which one can coherently exchange charge, as argued 
by Aharonov and Susskind (1967). As another example, 
the experimental realization of Bosc-Einstein condensa- 
tion in alkali atoms provided a reference frame for the 
phase that is conjugate to atom number (Dowling et al, 
2006). We see no obstacle in principle to lifting more 
general sorts of superselection rules as well. 

What sets the two categories apart in practice seems 
to be the fact that some reference frames, such as those 
for spatial location or angular position, arc ubiquitous, 
whereas others, such as a frame for the quantity conju- 
gate to charge, tend not to arise through natural causes 
and are difficult to prepare and maintain. But this may 
be only a practical and not a fundamental difference. 

Another motivation might be given for treating the two 
categories differently, specifically, that a superselection 
rule for linear momentum would seem to imply that ob- 
jects could not be localized in space, and this, one might 
think, would be contrary to what is observed. However, 
all that is ever observed empirically is the localization of 
systems relative to other systems, and this is consistent 
with a superselection rule for total linear momentum. If 
one seeks to describe the entire universe quantum me- 
chanically, as is typically done in quantum cosmology and 
some approaches to quantum gravity, then it is natural to 
assume SSRs for all global transformations, so that there 
is no distinction between charge and linear momentum. 
One can reach this conclusion by noting that all physi- 
cal systems that could serve as RFs have been quantized. 
Alternatively, one can appeal to one of the central lessons 
of general relativity: that all observable quantities ought 
to be relational. 



D. Superselection rules and quantum cryptography 

Information-theoretic security is a form of security that 
does not rely on assumptions about the computational 
capabilities of one's adversary. The appeal of quantum 
cryptography is that it offers protocols achieving this sort 
of security where classical protocols fail. Quantum key 
distribution is the primary example of a task for which 
this is the case. On the other hand, there exist crypto- 
graphic tasks, such as bit commitment, for which it has 
been shown that even quantum protocols cannot achieve 
information-theoretic security. The possibility of quan- 
tum key distribution arises ultimately from a restriction 
imposed by the laws of quantum mechanics on would-be 
eavesdroppers - namely, that quantum information can- 
not be cloned. By definition, SSRs also impose restric- 
tions on the accessible quantum states and operations. 
For instance, a SSR for charge forbids the creation of 
superpositions of eigenstates of differing total charge. It 
is conceivable therefore, as first suggested by Popescu 
(2002), that SSRs could place restrictions on would-be 
cheaters and thereby achieve greater security for some 
tasks (for instance, unconditional security for bit com- 
mitment) (DiVincenzo et at, 2004; Kitaev et at, 2004; 
Mayers, 2002; Verstraete and Cirac, 2003). 

To motivate the intuition that SSRs might improve the 
security of quantum protocols, we consider the case of 
a partially binding and partially concealing bit commit- 
ment protocol (Spekkens and Rudolph, 2001) in the pres- 
ence of a superselection rule for SO (3). Alice prepares 
two qubits in cither the singlet state \ip~), which has to- 
tal spin 0, or the triplet state |11), which has total spin 
1 , according to whether she wants to commit a bit b = 
or 1 respectively. She sends Bob one of the two qubits 
as a token of her commitment. Bob cannot distinguish 
the reduced states 1/2 and |1) (1| with certainty and so 
the protocol is partially concealing. At a later stage, she 
sends him the second qubit, at which point Bob checks 
her honesty by performing a projective measurement to 
discriminate \tp~) from |11). There is no cheating strat- 
egy that allows Alice to unveil an arbitrary bit value, so 
the protocol is partially binding. Clearly each step in 
the honest protocol respects the SSR. However it is quite 
plausible, at first sight, that an optimal cheating strat- 
egy for Alice will not respect the SSR - either because 
she must prepare a state which is a superposition of two 
different angular momenta, such as (\"4>~) + or 
because prior to sending the second qubit to Bob she 
must apply to it some local operation that violates the 
SSR. If all of Alice's optimal cheating strategies required 
SSR violation, then the degree of bindingness against Al- 
ice and thus the security of the protocol would be greater 
by virtue of the SSR. 

Despite the plausibility of this notion, it turns out that 
SSRs do not, in general, offer the possibility of cryp- 
tographic protocols with greater security (Kitaev et at, 
2004) . This result can be proven using the general frame- 
work of Sec. IV. B. We begin by demonstrating this for 
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the case of arbitrary two-party cryptographic protocols. 
Such protocols can be formulated as follows. Alice and 
Bob each hold a local system in their laboratories, called 
A and B respectively, and exchange a message system 
M back and forth. At the outset, they share a product 
state pa ® Rm ® Pb and in each round of the protocol, 
one of the parties applies a joint operation on their local 
systems and the message system and then sends the mes- 
sage system to the other party. At the end, both parties 
perform a measurement on their local system. 

Security in this context is a restriction on the degree 
to which a cheating Alice can influence the probability 
distribution over the outcomes of the final measurement 
of an honest Bob, and a similar restriction with the roles 
of Alice and Bob reversed, (no restrictions are guaran- 
teed for the case where both parties cheat.) We consider 
the case of a cheating Alice here. 

Because we may include any ancillas used by Alice and 
Bob in the local systems A and B, we can assume that all 
operations are unitary. In the honest protocol, the first 
operation implemented by Alice is V Al , the first imple- 
mented by Bob is V Bl , the second by Alice is Va 2 , and 
so forth. We denote the POVM associated with Bob's 
final measurement by {E B ,k} where k labels the possible 
outcomes. The probability of outcome k is 

p B (k) = Tr (E B ,kV{pA <8> Pm ® Pb)V^) , (4.32) 

where 

V = V Bn V An --- V B2 Va 2 V Bl V Al . (4.33) 

Suppose that the honest protocol respects the SSR, 
and that the SSR is associated with a group G. In this 
case, all the states, unitaries and POVM elements de- 
scribed above are G-invariant operators. We now show 
that a cheating strategy that violates the SSR can al- 
ways be simulated by a cheating strategy that respects 
the SSR, and consequently a cheater that faces a SSR 
does not suffer any disadvantage in cheating ability com- 
pared to one who does not. 

Suppose that Alice's optimal SSR-violating cheating 
strategy is one wherein she replaces each G-invariant op- 
eration V Aj with an operation V A . that need not be G- 
invariant. She thereby can cause the probability of out- 
come k to be p' B (k) = Tr {E B . k V' {p A ® Pm ® Pb)V'^) 
where V = V Bn V An ■ ■ ■ Vb 2 V A2 V Bi V Ai . We now demon- 
strate that there is an SSR-respecting cheating strategy 
that also leads to p' B (k). The trick is to use the construc- 
tion of Sec. IV. B. Alice simply extends her local system 
A to RA, where R is a system that will play the role of a 
local reference frame. She replaces the G-noninvariant 
operation V' A . , which acts nontrivally on AM, with 
${V A ), where % is the map defined in Eq. (4.25). $(V A ) 
is a G-invariant unitary operator that acts nontrivially 
on RAM. Bob's operations must be trivial on R, so 
that we can write these as Ir <g> V Bj . It is useful to 
note however that because the V Bj are G-invariant, it 
follows that Ir <g> V Bj = ${V Bj ). Moreover, given 



that $ preserves the algebra of operators (property (2) 
of the $ map), we have $(V Bn )${V A )■■■ $(V Bl )$(V Ai ) = 
$(V Bn V An ---V Bl V Ai ) = $(V). The initial state and 
Bob's final measurement are also trivial on R and G- 
invariant. It follows that d~^lR <g> pa ® Pm <£> Pb = 
d R 1 ${p A ® Pm® Pb) and I R <g> E B .h = ${E Bik ). 

Thus, the probability of outcome k in Alice's SSR- 
respecting cheating strategy is 

d^Tr ($(E Bik )${V')$(p A ® pm ® Pb)HV'^)) 

= Tr {EbmV'pa ®Pm® PbV 1 ^) = p' B (k) , (4.34) 

where we have used Eq. (4.31). Thus, any probability 
distribution achieved by a cheating strategy that violates 
the SSR can also be achieved by one that respects it. 

It is straightforward to generalize this result to the case 
of an n-party protocol with k cheating parties. We be- 
gin with the case of a pair of cheating parties (Alice and 
David) . If their SSR-violating cheating strategies consist 
of unitaries V' A . and V' D . , then, by the same reasoning as 
applied above, they can achieve an equivalent degree of 
success using SSR-respecting cheating strategies consist- 
ing of unitaries %{V A ) and %(y' D .) which are nontrivial 
on RA and RD respectively. Because only one of these 
parties is ever implementing an operation at a given time, 
they can achieve this strategy by passing the RF R back 
and forth between them. Moreover, even if Alice and 
David are prevented from implementing such transmis- 
sions during the protocol, there is a resource they may 
share prior to the protocol, namely, a shared RF, which 
allows them to do just as well. Suppose their shared RF 
is constituted of a pair of systems, R\ and i? 2 , in the 
state 

PR!R 2 = J \g) Rl (g\ ® \g) R2 (g\ ■ (4.35) 

We show that by using i? 2 alone, David can achieve the 
same operations on MD as could be achieved if Alice had 
passed him Ri . We define $i and $2 as the generalizations 
of $ for R = Ri and R = R 2 respectively. If Alice had 
passed David a copy of J?i, he could replace V' D . by the 
operation $i(V^.). But given that 

%X{V' D] )PR 1 R 2 ® PMD%xiy'^) 

= j &g\g)Ri{g\ ® \g)R 2 (g\ 

®{U{g)V Dj U\g))p M D{U{g)V^{g)) 

= HVd } )PR lR , ® PmdHvS, ) - ( 4 -36) 

it follows that David achieves the same effect by replac- 
ing V' D by the operation $2(Vq ), which is something 
that he can achieve locally. The generalization of this 
argument to an arbitrary number of cheating parties is 
straightforward. 

It should be noted that for Lie groups, the states we 
have been considering are, strictly speaking, not normal- 
izable. However, one can introduce a sequence of nor- 
malizable approximations to these states, parametrized 
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by an integer N, corresponding to RFs of bounded size, 
such that the results described here are reproduced in 
the limit N — > oo, that is, the limit of an unbounded RF. 
See Kitaev et al. (2004) for details. 

Supcrselection rules that are not associated with a 
compact symmetry group have also been considered, for 
instance, the superselection rule for univalcnce which de- 
nies the possibility of a coherent superposition of boson 
and fermion (Doplicher and Roberts, 1990) and supcrs- 
election rules that can arise in two-dimensional systems 
that admit non-Abelian anyons. Using different methods, 
it has been shown that such SSRs also fail to yield any 
advantages for two-party cryptography (Kitaev et al, 
2004) , but the question remains open for multi-party pro- 
tocols. 



V. ALIGNING REFERENCE FRAMES 

Separated parties often require the use of a shared 
reference frame. For instance, they may require their 
clocks to be synchronized or their Cartesian frames to be 
aligned. Furthermore, although it was shown in Sec. Ill 
that lacking a reference frame does not prevent one from 
achieving information-theoretic tasks such as communi- 
cation, cryptography and computation, this restriction 
can decrease the (non-asymptotic) efficiency with which 
they can be achieved and often requires more sophisti- 
cated encodings. Thus, separated parties might opt to 
initially devote their communication resources to setting 
up a shared reference frame and thereafter use a standard 
encoding, rather than perpetually circumventing the lack 
of such an RF with a relational encoding. 

We refer to the process by which observers correlate 
their local reference frames, that is, by which they re- 
fine their knowledge of the relation between them, as 
reference frame alignment. In order to do so, the parties 
must exchange systems with the relevant degrees of free- 
dom, which serve as finite samples of the sender's local 
RF and can be compared to the receiver's local RF to 
obtain some information about the relative orientation 
of the two frames. For example, through the exchange 
of spin- 1/2 particles, Alice and Bob can align their lo- 
cal Cartesian frames. Exchanging quantum states of an 
optical mode allows them to align their phase references. 

We discussed in Sec. IV how a quantum system of un- 
bounded size can play the same role as a classical refer- 
ence frame. By the transmission of such a system, one 
can achieve perfect alignment of separated classical refer- 
ence frames. However, one is often restricted to sending 
systems of bounded size, either to economize on com- 
munication resources or because of the impracticality of 
encodings that require a joint preparation of too many 
systems. It is therefore of great interest to determine the 
fundamental quantum limits on the alignment precision 
that can be achieved for given communication resources. 
This is the question we shall address in this section. 

It should be noted that if the communication resources 



are bounded, the end result of an alignment scheme is 
partial correlation between the local reference frames. 
The operational consequence of not having complete cor- 
relation is that the parties must contend with the deco- 
herence that arises from the weighted G-twirling opera- 
tion discussed in Sec. II. C. As the imprecision in this 
alignment approaches zero, the weighted G-twirling op- 
eration approaches the identity map. We shall be con- 
cerned here with schemes that minimize this imprecision. 

Consider an alignment scheme for some form of refer- 
ence frame, which makes use of a number N of trans- 
mitted quantum systems. The expected error in align- 
ment, measured by the variance, can be theoretically de- 
termined as a function of N. The problem has close 
connections with the field of quantum parameter esti- 
mation (Holevo, 1982) and quantum metrology (see Gio- 
vannctti et al. (2004a)), and a general feature of this be- 
haviour is closely related to well-studied results in phase 
estimation. Specifically, if the N quantum systems are 
used independently (i.e., entangled signal states are not 
used, and measurements on individual systems are in- 
dependent) one can only achieve an error, quantified by 
the variance, that scales as 1/N. This result, which is 
a consequence of the central limit theorem, is commonly 
known as the standard quantum limit. In contrast, strate- 
gies which make use of entanglement between the N sys- 
tems, as well as joint measurements, can achieve an error 
(variance) that scales as 1/N 2 . This result, commonly 
known as the Heisenberg limit, represents the fundamen- 
tal limit to the scaling of accuracy as allowed by the laws 
of quantum physics (Giovannetti et al., 2006). 

We begin with a discussion of a simple example to pro- 
vide some intuition about what sorts of states are optimal 
for the alignment problem. Hcuristically, they are states 
that, when mixed over the action of the group, have sig- 
nificant support on the largest possible dimensionality of 
Hilbert space, thereby making them as distinguishable as 
possible. This intuition can be made rigorous in the con- 
text of a simple figure of merit: the maximum likelihood 
of a correct guess. After introducing a more useful fig- 
ure of merit, the fidelity, we describe in detail strategies 
for the alignment of phase references, spatial directions, 
and Cartesian frames, and demonstrate how the Heisen- 
berg limit can be achieved. We also overview results on 
the alignment problem for a few other sorts of reference 
frames. For alternate overviews of techniques for align- 
ing directions and Cartesian frames, see Peres and Scudo 
(2002b) and Bagan and Munoz-Tapia (2006). 



A. Example: sending a direction with two spins 

Suppose Alice and Bob have uncorrelated Cartesian 
frames and they wish to align their z axes by Alice trans- 
mitting a pair of spin-1/2 particles to Bob. What state 
of these two spins should Alice prepare, and what mea- 
surement should Bob perform, in order to optimize their 
expected success in this task? 
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A seemingly reasonable strategy would be for Alice to 
send parallel spins aligned with her z axis. Assuming 
Alice's z axis points in the n direction relative to Bob's 
frame, this strategy corresponds to sending Bob the state 
|n)|n), where (S-n)|n) = §|n), relative to his local frame. 
Bob's task is now one of state estimation - to optimally 
estimate the pure state |n) given two copies (Massar and 
Popescu, 1995). First, we note that the set of states from 
which Bob must measure are all on the three-dimensional 
symmetric j = 1 subspace Ti.j=i of two spins; he can 
thus restrict his measurement to a POVM on this Hilbcrt 
space. We consider the case where Bob performs a co- 
variant measurement, i.e., a continuously-parametrized 
POVM of the form 

{E n = R(fl)® 2 E R\fl)® 2 , n e SU(2)} , (5.1) 

where E = \e)(e\ is a positive rank-1 operator. (Any 
POVM of higher rank can be simulated by a rank-1 
POVM followed by classical post-processing of the re- 
sult.) To form a POVM, the vector |e) must satisfy the 
normalization condition 



to 



/ 



dflEn 



i j= i 



(5.2) 



where Ij = \ is the identity operator on Hj=i. It 
is straightforward to show (for example, by using 
Eq. (3.10)) that this condition completely constraints the 
form of the POVM, i.e., it requires that |e) = \/3|00) up 
to an arbitrary choice of single-spin basis {|0), |1)}. Let 
Bob choose |0) to be aligned with his +z direction. 

If Alice sends two spins in the state |n)|n), and Bob 
performs the measurement (5.1), then the probability of 
Bob obtaining the measurement outcome O is given by 
the Born rule, 

p(0|n)=Tr[ J B n |n)|n)(n|(n|], (5.3) 
= 3cos 4 (/3/2) , (5.4) 

where (3 = cos _1 (n-Qz) is the angle between n and flz. If 
Bob obtains the measurement outcome 0, then his best 
guess as to the direction n is n g = flz. A natural way 
with which to quantify the quality of Bob's guess is to 
use the fidelity (1 + n • n s )/2 = cos 2 (/3/2), which gives 
a value of 1 if he guesses correctly (n s = n), a value of 
if he guesses the opposite direction (n s = — n), and 
which decreases monotonically between these two limits. 
A random guess would give an average fidelity of 1/2. 

The average fidelity of Bob's guess, then, is given by 
averaging over the distribution of transmitted states by 
Alice (chosen to be uniformly sampled from the sphere) 
and all possible measurement outcomes by Bob, weighted 
by the fidelity, 



F = j dn J dn P (n\n) 



1 + n • flz 



(5.5) 



As the probability p(f2|n) and the fidelity depend only 
on the angle (3 = cos _1 (n • fiz), this expression simplifies 



F=\f d/3sin/3(3 



cos 



W2)) 



1 + cos (3 3 



V (5-6) 



We note that the same average fidelity can be achieved 
with a finite (4-element) PVM in the basis given by 
Eq. (3.35) (Massar and Popescu, 1995). 

Remarkably, this method where Alice sends two par- 
allel spins is not optimal; a higher average fidelity 
can be achieved if Alice instead sends two anti-parallel 
spins (Gisin and Popescu, 1999), as we now demonstrate. 
Let |n)|— n) be the two-qubit state transmitted by Alice; 
again, Bob must perform a type of state-estimation to 
determine n. Note that the set of possible states is no 
longer contained within the j = 1 symmetric subspace, 
and thus Bob must now perform a measurement on the 
entire two-spin Hilbert space. Again, choosing a covari- 
ant POVM of the form (5.1), the new normalization con- 
dition now becomes 



/ 



dflE n = /, 



(5.7) 



where I is now the identity on the full two-spin Hilbert 
space. Choosing Eq = |e)(e| to be rank-1, this normal- 
ization again completely constrains the POVM (up to an 
arbitrary choice of single-spin basis by Bob) to be 



|e) = v%+) + |VO 



(5.8) 



where = ^(|01) ± |10)). 

Again, the probability that Bob obtains the measure- 
ment outcome fl given that Alice prepared |n)|— n) is a 
function only of the angle (3 between n and flz 1 given in 
this case by 



p(fi|n) 



(l + V^cos/3) 2 



(5.9) 



This leads to a fidelity of F = (1 + \/3)/(2\/3) ~ 0.789, 
which is greater that that achieved for the parallel spin 
case. (We note that this fidelity can also be achieved 
with a finite (4-outcome) PVM of the form 

| . ) = ^ K)|- n< HI- n< )K) + i |r)| (510) 

where |n,) are along the four direction of the tetrahedron, 
given in Eqs. (3.36)-(3.39). An experiment demonstrat- 
ing this protocol has been performed by Jeffrey et al. 
(2006), wherein it was referred to as "quantum orien- 
teering" .) 

A heuristic explanation of why the anti-parallel spins 
are superior to the parallel spins for this task is obtained 
by investigating the orbits of the transmitted states un- 
der the relevant group, in this case, the group of rotations 
SU(2). Consider the orbit under the group of a state of 
parallel spins |n)|n), 

Af par = {(i2(n)®i2(n))|n)|n), fl € SU(2)} . (5.11) 
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This orbit has support entirely on the three-dimensional 
symmetric j = 1 subspace of the two-spin Hilbert space. 
In contrast, the orbit under the group of a state of anti- 
parallel spins |n)|— n), 

M anti = {(R{fl) ® R{n))\n)\-n) , fl e SU(2)} , (5.12) 

has support on the full four-dimensional two-spin Hilbert 
space. The latter orbit spans a larger space, therefore 
its elements are, loosely speaking, more orthogonal and 
consequently easier to discriminate. We will see in the 
following that this heuristic idea can be formalized to 
provide optimal methods for the alignment of any type 
of reference frame. 



B. General approach to aligning reference frames 

Consider the general problem of aligning an RF asso- 
ciated with the group G using the one-way transmission 
of a quantum system (composed, say, of a number of el- 
ementary systems) with Hilbert space TL. For instance, 
one might be trying to communicate information about 
a Cartesian frame, associated with the group SU(2), us- 
ing N spin- 1/2 particles and corresponding Hilbert space 
TL = (Hi/ 2 )® N ■ The problem is to devise an optimal 
protocol for this task, given the allowed communication 
resources, for some given figure of merit. 

The most general statements we can make about op- 
timal RF distribution schemes concern the form of an 
optimal POVM for a given covariant set of signal states, 
provided the figure of merit satisfies some very general 
and natural properties. Optimal states for a general 
task of this sort can be taken to be pure, given that any 
mixed state scheme is a convex sum of pure state schemes 
and therefore can do no better than the best pure state 
scheme. Thus, the signal states form an orbit of pure 
states 

\iP(g)) = U(gM, (5.13) 

where U(g) is the representation of G on TL. We call \ip) 
the fiducial state. 

We now consider a general form for the fiducial state 
in terms of the decomposition of TL into irreps of G, given 
by Eqs. (2.22) and (2.23). In terms of the charge sectors 
H q , we express the fiducial state as 

with f3 q satisfying J2 q IAj| 2 = 1> an d where \ip q ) oc H q \ip) 
is the normalized component of the fiducial state on each 
charge sector H q (where we recall that H q is the pro- 
jector onto the qth charge sector). Each state \ip q ) can 
be viewed as a (generally entangled) state on the tensor 
product decomposition H q = M. q ®N q of Eq. (2.23). Let 

l^)=EAW|^))®|rW), (5.15) 

m— 1 



be a Schmidt decomposition of this state on M q ®Af q , 
where 

d q = min{dim M q , dimA/" 9 } . (5.16) 

We note that, if \ip q ) does not have maximal Schmidt 
rank (meaning some of the X^m are zero), then the 
Schmidt vectors arc not unique. Let N q C J\f q be the 
ciq-dimensional space spanned by the Schmidt vectors 

{|?"m' ) )}- Let {|</>m' ) )} be a basis for A4 q , obtained us- 
ing the Schmidt vectors from (5.15) and, if necessary, 
completing this set arbitrarily to a basis. 

A general expression for the fiducial state is thus 

w = £&E^ ) i^ ) >®i r & ) >> ( 5 - 17 ) 

<j m=l 

which lies on the subspace TL C TL given by 

TL = ^M q ®N q . (5.18) 

In addition, the support of the orbit of the fiducial 
state, i.e., the space 

= span{i7( 5 )|V) , g e G} 

= supp[W>M)], (5-19) 

will also lie within TL, 

TL^ C TL . (5.20) 

Thus, for any choice of a fiducial state \ip), the mea- 
surement may be described by a POVM that is restricted 
to TL. In addition, if the figure of merit we are attempt- 
ing to optimize satisfies some general conditions (which 
we discuss below), the optimal POVM can be chosen to 
be G- covariant. 12 Moreover, its elements can be taken 
to be rank-1. 13 Thus, the optimal POVM must have the 
form {E(g)}, given by 

E{g) = U{g)\e){e\U{ 9 y . (5.21) 

We call |e)(e| the fiducial POVM element. Given that 
these elements form a resolution of identity on TL, we 
have J dg E(g) = 1^, or equivalently, 

9[\e)(e\]=I ii . (5.22) 



We note that choosing a covariant POVM is sufficient to obtain 
an optimal protocol, but not necessary. For practical schemes, 
it may be valuable to identify finite-clement POVMs that also 
obtain the optimum, as we saw in Sec. V.A. 

For a proof of this, see Chiribella et al. (2005). In general, any 
non-rank-1 POVM can be simulated by a rank-1 POVM followed 
by classical post-processing of the result; however, this simulation 
need not be covariant. 
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Thus an RF alignment scheme of this sort is specified by a 
fiducial state \ip) and a fiducial POVM element |e)(e|. In 
order to determine an optimal scheme, we first determine 
the optimal |e)(e| for a given \ip). 

The constraint Eq. (5.22) completely fixes the form of 
|e) to be 

d q 

|e) = sJdMM q ) J2 \<f>W) ® • (5-23) 

q m—1 

This vector |e) of Eq. (5.23) can be described as follows: 
it is a coherent superposition across the charge sectors 
where has support, with the amplitude squared in 
each such charge sector given by the dimensionality of 
M. q , and the projections in each such charge sector given 
by maximally entangled states across M q ®N q . 

We now demonstrate why |e) must take this form. 
Eq. (5.22) can be expressed as 



a continuous group, the likelihood of a correct guess is 
infinitesimal, and so we must look at the maximum like- 
lihood density - the probability density /z of obtaining 
the POVM outcome E(g) given that the signal state is 
\ip(g)}, averaged over the prior distribution over signal 
states, which we take to be uniform. (A more simple 
analysis is possible for finite groups.) This density takes 
the simple form 



H = J dgTr[E(g)\^(g))^(g)\] 

= M 



(5.29) 



As the fiducial POVM element |e) is fixed, optimization 
is achieved by taking \ip) to be parallel to |e), 



\± 



(5.30) 



<g> Tg[n 9 |e)(e|nJ = ^I Mq ®Itf q ■ ( 5 - 24 ) where ll e ll = V( e \ e )- :t follows from Eq. (5.23) that 



In terms of the charge sectors, we write 



(5.25) 



where the c q are nonzero and \e q ) = U q \e) is a normalized 
state in the jth sector. Projecting Eq. (5.24) onto a single 
charge sector and tracing over M. qi we find 



IJ2 diMM q )d q = VdimH . (5.31) 



The optimal fiducial state, which has the form of 
Eq. (5.17), must have all Schmidt coefficients \$ equal 
and non-zero, and the coefficients (3 q are completely fixed 
by the optimal |e); i.e., the optimal fiducial state is 



TrM q [\e q )(e q \] = Itf/dq. 



(5.26) 



which tells us that the reduced density operator on J\f q 
of \e q ) is the completely mixed state, and consequently 
that \e q ) is a maximally entangled states across M q ®M q . 
This may be written as 



= E 



id\xa{Mq) 
dim7Y 



Note that this state satisfies 



(5.33) 



\e q ) 



E 



(5.27) 



Projecting Eq. (5.24) onto a single charge sector and trac- 
ing over both J\f q and M q , we conclude that 



\c q \ 2 = Tr[I Mq }TT[I^}=dim(M q )d q 



(5.28) 



We may define \<$n) in such a way that the coefficients 
c q can be taken to be real and positive. Combining 
Eqs. (5.25), (5.27) and (5.28), we recover Eq. (5.23). 

The covariant POVM, then, is fixed by the problem, 
and it remains only to determine the optimal fiducial 
state To do so, one needs to specify a figure of merit. 



C. Maximum likelihood estimation 

We now consider a particular choice for a figure of 
merit: the maximum likelihood of a correct guess (Chiri- 
bella et al, 2004c). Because our standard example is 



We can conclude that the maximum likelihood density of 
a correct guess takes the general form 

Mmax = ||e|| 2 = dimH = rank((/[|V>)(^|]) 

= dim M q x min{dimA^ g ,dimA/' 9 } . (5.34) 
i 

Given Eq. (5.33) and Eq. (5.34), we can interpret this 
result as follows: we maximize the likelihood of a cor- 
rect guess by choosing the fiducial signal state \tp) to be 
such that, under G- averaging, the weights of the state 
^[IV'XV'I] are spread uniformly over the largest possible 
space. Thus, at least for the case of maximum likelihood 
estimation, the intuition behind why antiparallel spins 
do better than parallel spins is found to have a rigorous 
counterpart, and indeed this intuition is found to gen- 
eralize to the alignment of any RF whose configurations 
correspond to the elements of a group. By choosing a 
fiducial state in this way, the signal states are made as 
distinguishable as possible. 
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1. Maximum likelihood estimation of a phase reference 

With the general results above, the optimal perfor- 
mance of any particular alignment protocol quantified 
by maximizing the likelihood can be directly and sim- 
ply calculated. Suppose, for example, one seeks to align 
phase references by transmitting at most n max photons 
in a single mode. The relevant group in this case is U(l). 
The charge sectors correspond to total photon number, 
so we use n rather than q to denote them. Because the 
irreps of U(l) are one-dimensional, we have dim.M n = 1. 
In this case, the optimal fiducial POVM element and the 
optimal fiducial signal state are 

""max -i ^max 

|e>=£>>. |V) = , = ( 5 - 35 ) 

n=0 V^max + 1 n=Q 

Clearly, 

"max , 

*><V>I] = £- -r\n)(n\, (5.36) 

~ '''max i r 
n— 

so that the maximum likelihood density of a correct guess 
is 

/Umax = rank(C/[|^)(V>|]) = n max + 1 . (5.37) 

Note that for multiple modes, the subspaces H n may be 
multi-dimensional, and in this case the basis states can 
be chosen to be any set of eigenstates of iV tot , i.e., any 
multi-mode states that are eigenstates of total photon 
number. 

For comparison, it is useful to consider the maximum 
likelihood that could be achieved using a coherent state 
| a) with mean photon number n max /2 (we cut off the 
amplitude for n > n maK which is negligible for sufficiently 
large values of n max ), 

,»w -\ a \ 2 /2 n 2 

Mcs = |He)| 2 = E Tl— > ( 5 ' 38 ) 

which behaves as |a| = \J n max /2 for large values of n max . 

Thus, the phase eigenstate offers a quadratic improve- 
ment in n max over the coherent state. Heuristically, this 
is due to the fact that for the Poissonian number distribu- 
tion of the coherent state most of the support lies within 
±^/E of the mean photon number n = n max /2. Thus, 
the majority of the support of the U(l)-orbit of a coher- 
ent state is carried by a subspace of the Hilbert space 
with dimension that scales as \ffi. For the optimal state 
1^ = ^2ft+i Sn"o l n )' m contrast, the dimensionality of 
this subspace scales as n. 

The quadratic improvement achievable in such cases 
is typically explained by noting that there is an uncer- 
tainty relation between phase and photon number, and 
to achieve the smallest possible variance in phase, one 
requires the largest possible variance in photon number. 
This is certainly a useful tool for understanding the suc- 
cesses of different schemes. Nonetheless, as we shall show 



presently, whereas the optimal strategies for aligning RFs 
associated with non-Abclian groups can also be under- 
stood in terms of the support of the group orbit of the 
signal state, it is at present unclear whether an argument 
in terms of an uncertainty principle can be provided in 
such cases. 



2. Maximum likelihood estimation of a Cartesian frame 

We now consider the task of optimally aligning a full 
spatial (Cartesian) frame through the exchange of spin- 
1/2 particles, based on maximizing the likelihood of a 
correct estimation. For this example, we will be required 
to use the multiplicity of irreducible representations of 
SO (3) that occur in (Tti/2)® N to obtain the optimal 
scheme. 

We restrict ourselves to the case of N an even num- 
ber for simplicity. N spin- 1/2 particles carry a tensor 
representation R® N of SO (3); this representation is re- 
ducible, and the irreducible representations (labeled by 
j) appear with nontrivial multiplicities. As analyzed in 
Sec. III. A. 2, the total Hilbert space of N spin-1/2 parti- 
cles can be decomposed as 

N/2 

(n 1/2 f N =®Mj®Mj, (5.39) 

3=0 

where A4j carry irreducible representations Rj of SO (3) 
and have dimensionality 2j + 1 , and Afj carry the trivial 
representation of SO (3) and have dimensionality given 
by Eq. (3.21). For this example, the dimension of each 
decoherence-free subsystem Afj is greater than or equal to 
the dimension of the corresponding decoherence-full sub- 
system Mj for all j except j = N/2 (where dim A/} = 1). 
Thus, the maximum dimension of Hy is, from Eqs. (5.20) 
and (5.34), 

N/2-1 

dimH^ = (N + 1) + £ (2j + l) 2 

3=0 

= lN 3 + ^N+l. (5.40) 

For each j < N/2 we choose a (2j + l)-dimensional sub- 
space Afj C Afj with basis \j, a(m)). The optimal signal 
state thus has the form 

l ^ W> ^d4mW( VFTT|Ar/2 ' Ar/2> 

N/2-1 j 

+ £ V/27TT £ \j,m)®\j,a(m))), (5.41) 

3=0 m=-j 

and the maximum likelihood density of a correct guess is 

Mmax = gA 3 + § N + 1 , (5.42) 

which scales as N 3 /6 for large N. 
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D. General figures of merit 

As discussed above, maximizing the likelihood of the 
correct guess led us directly to a general principle for 
choosing the fiducial signal state. However, as a fig- 
ure of merit, the maximum likelihood density is not a 
very practical choice - it rewards only a perfectly correct 
guess. In many situations, one would desire a figure of 
merit that would quantify the performance of a scheme 
by the amount of Shannon information gained by the re- 
cipient about the sender's reference frame. However, such 
figures of merit usually lead to intractable optimization 
problems. 

A more common and tractable approach is to introduce 
a payoff function f{g',g) which specifies the payoff for 
guessing group element g' when the actual group element 
is g (Chiribella et al., 2005). Assuming a uniform prior 
for the signal states, the figure of merit for the alignment 
scheme can then be the average payoff 

f = J dgdg'p(g'\g)f(g',g), (5.43) 

where p(g'\g) is the probability of guessing g' when the 
signal state is g for the scheme in question. In particular, 
the commonly-used fidelity, which quantifies the variance 
of the average guess and which leads to direct compar- 
isons with the standard quantum limit, is one choice of 
payoff function; we will determine this fidelity and ex- 
plore protocols that optimize its average in the examples 
that follow. 

The task of reference frame alignment imposes some 
natural constraints on the form of payoff functions. First, 
we note that the group elements g and g' denote an orien- 
tation relative to some background RF, i.e., the identity 
group element corresponds to "aligned with this back- 
ground RF". However, it is desirable to construct pro- 
tocols that are independent of any background RF; for 
example, if the background RF was transformed by a 
group element h £ G, and g and g' were now defined with 
respect to this transformed background RF, the payoff 
function should be the same. Such protocols are associ- 
ated with a payoff function f{g', g) that is right-invariant, 
i.e., which satisfies 

f(g'h- 1 ,gh- 1 ) = f(g',g), VheG. (5.44) 

In addition, the payoff function should be a function only 
of the relative transformation relating the transmitted 
state (determined by g) and the measurement outcome 
(determined by g 1 ). This requirement of a protocol de- 
mands that the payoff function be left-invariant, 

f(hg',hg) = f(g',g), V h e G . (5.45) 

Payoff functions that are left-invariant are also referred 
to as covariant. It is always possible to find a covariant 
POVM that is optimal for any estimation problem with a 
covariant (left-invariant) payoff function (Holevo, 1982), 



and it is for this reason that we focussed our attention 
on covariant POVMs early in this section. 

Any function /(<?', g) that is left-invariant can be writ- 
ten as a function f(g',g) = f(g'~ 1 g)', if this function 
is also right-invariant, then it satisfies f(hg'~ 1 gh~ 1 ) = 
f(g'~ 1 g), and thus is a class function, i.e., a function on 
the conjugacy classes of G. (Recall two group elements, 
gi and gi, are in the same conjugacy class if there ex- 
ists another group element h such that g\ = hg 2 h~ 1 .) 
Any class function / can be expanded as a sum of the 
characters 14 Xq(g) OI G as 

f(g'- 1 g) = Y, a ^'- 1 g), (5.46) 
<? 

where the a q are arbitrary coefficients. We restrict our 
attention to real, positive- valued payoff functions, which 
will allow us to perform a simple maximization. 

We note that the maximum likelihood estimation task 
described above corresponds to choosing a payoff func- 
tion f(g',g) = 8{g'~ 1 g), a delta function. This payoff 
function is both left- and right-invariant, and its expan- 
sion in terms of characters as in Eq. (5.46) corresponds 
to choosing all a q positive and equal to the dimension of 
the irrep. 

As a consequence of the covariance of both the set of 
signal states and the POVM, the probability p(g'\g) is 
also a function of g'~ 1 g, i.e., 

p(g'\g) = | (e\ Utf^g) |V) | 2 

^Pig'-'g). (5.47) 

The average payoff of Eq. (5.43) then simplifies as 

/= J dgdg'pig'-'g)^'-^) 

= J dgp(g)f(g) , (5.48) 

which follows from the invariance of the measure dg. Us- 
ing the explicit form of Eq. (5.47), we have 

/ = J dg^\U\g)\e)(e\U{gmf(g). (5.49) 
Defining 

M = J dgU\g)\e)(e\U{g)f(g), (5.50) 
we may rewrite / as 

/ = <V|M|V>>. (5.51) 



The characters X«(ff) of a group G form a basis of class functions; 
they are given by the trace of the irreducible representations T q 
ofG, i.e., Xg (9) = Tr[T 9 ( 9 )]. 
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This expression is the generalization of Eq. (5.29) to 
an arbitrary covariant payoff function. As the fiducial 
POVM element is completely constrained to be of the 
form of Eq. (5.23), the operator M is therefore deter- 
mined by the figure of merit. In order to maximize the 
average payoff /, then, one must find a fiducial state \ip) 
of the form (5.f7) that lies in the eigenspace of M with 
the largest eigenvalue. Specifically, we solve the eigen- 
value equation 



M|V) = A" 



(5.52) 



and the use of this state yields a maximal average payoff 
of 



jmax 



(5.53) 



For the problem of optimally aligning reference frames 
using a left- and right-invariant payoff function, we will 
use the following result of Chiribella et al. (2005) with- 
out proof 15 : that the optimal fiducial signal state can be 
chosen to have the form 



= £&£ 



ra—l 



for coefficients j3 q satisfying X^l/^l 2 = 1- These coef- 
ficients are determined by the specific choice of payoff 
function. We note, however, that this result greatly sim- 
plifies the optimization problem: the number of coeffi- 
cients is now given by the number of irreps appearing in 
the decomposition of U, rather than by the dimension of 
the Hilbcrt space. 



1. Fidelity of aligning a phase reference 

We now reconsider the problem of aligning a phase 
reference, as in Sec. V.C.f, but with an alternate (and 
commonly used) payoff function: the function f(0',6) = 
cos 2 [(#' — 0)/2], which takes the value f for the correct 
guess (9' = 9) and for 9' = 9 + tt. Note that this payoff 
function is left- and right-invariant, and can be written 
as f(9) = cos 2 (#/2), where 9 now denotes the relative 
angle between the signal and guess. This figure of merit 
is commonly referred to as the fidelity. 

The Hilbcrt space for this task will be restricted as 
follows: we allow arbitrarily few or many modes, but the 
maximum total photon number is restricted to n max . (An 
alternate approach would be to bound the mean photon 
number; however, this adds considerable complexity to 
the problem.) 



15 The proof relies on determining an upper bound on the average 
payoff, and then demonstrating that states of the form (5.54) 
saturate this bound. 



As mentioned above, for any alignment scheme based 
on independent uses of N modes with at most a single 
photon in each, that is, N single-rail qubits, the average 
fidelity will approach / = 1 as 1/N, from the central 
limit theorem. This scaling is referred to as the standard 
quantum limit; the optimal scheme outperforms this scal- 
ing, as we will now demonstrate. We now optimize over 
choices of signal state \ip^ N ^) in order to maximize the 
expected payoff, quantified by the average fidelity / of 
Eq. (5.51). 

Let {\n) , n — 0, 1, . . . ,n max } be an arbitrary set of 
eigenstates of the total number operator N tot ; the de- 
tails of these states, including their mode structure, is 
irrelevant to the task. The fiducial POVM element is of 
the form |e) = E"=o x W)- 

The operator M of Eq. (5.50) is given in this instance 
by the matrix 



(5.54) Note that 



(n\M\n'} 

JO 27T 

\?>n,n' + \Sn,n' + l + \&n+l,n' ■ 



M=\M+U, 



(5.55) 



(5.56) 



where M nn > — <5„.„'+i +5 n +i in >. As any eigenvector of M 
is an eigenvector of M , it suffices to find the eigenvalues 
and eigenvectors of M. The maximum average fidelity is 
then 



r 



1 i 1 \ max 

2 + 4 A 



(M), 



(5.57) 



and is achieved when \ip) is the eigenvector of M associ- 
ated with the maximum eigenvalue A max (M). 
The characteristic equation we must solve is 



det(M — XI) = , 



(5.58) 



where / is the identity. Defining Gk = M — XI, where 
k is the dimension of the vector space on which M acts, 
one finds that 

detGfe = -AdctGfc-i - detGfc-2 , (5.59) 

for which the solution is 

detG fc = U k (-X/2), (5.60) 

where the £4 are the Chebyshev polynomials of the sec- 
ond kind, given by 



Uk(cos6) = 



sin[(/c + 1)0] 



sinf 



(5.61) 



Given that Uk(x) — ±Uk{—x), it follows that the charac- 
teristic equation is Un+i{X/2) = 0, and thus the largest 
eigenvalue is A max = 2cos(7r/(A + 2)). The maximum 
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average fidelity for the distribution of a phase reference 
is thus 

/ - max= i(i + cos(7r / ( 7V + 2 ))). (5.62) 
associated with the largest 



To find the eigenvector 
eigenvalue, we must solve 



M\iP) = A max |^) 



(5.63) 



Let f3 n be the coefficients of 
definition of M leads to 



- E^o x /3». The 

l„, : r i„ , = \ maX /3„, (5.64) 



for 1 < j < N - 1. At n = 0, we have ft = A max 
and at n — N, we have ftv-i — A max ftv. The solution is 
fin = C/„(A max /2), and the coefficients j3 n fall to zero at 
N + 1 as required. The optimal state thus has the form 



\^ N) ) =AA^sin 



n=0 



(n + 1)tt 



7V + 2 



|n) 



(5.65) 



where the normalization N is approximately N ~ (N/2+ 
f) -1 / 2 in the large- N limit (Berry and Wiseman, 2000). 
In the limit of large N, the average fidelity behaves as 



jmax I _ 



for TV > 1 . 



(5.66) 



Thus, this optimal protocol for the alignment of a phase 
reference has an error (variance) which decreases as 
1/N 2 , i.e., at the Heisenberg limit. 



Conjugation by another rotation in SO (3) simply changes 
the axis, not the value of u). Thus, conjugacy classes are 
labeled by an angle u> (a rotation by u> about some axis), 
and characters being class functions are functions only of 
w. Explicitly, they are given by 



sin[(2j + l)w/2] 
sin(a;/2) 



(5.69) 



The payoff function can be expressed in terms of the char- 
acter Xj=i 01 Rj=i (the representation of SO(3) that acts 
on spatial vectors), as 



(5.70) 



As it is a covariant function only on the conjugacy class, 
we can express it as 



f(") = \ + \xi(«>)- (5-71) 



The fiducial POVM element can be written as 

N/2-1 

| e W) = VN + T\%, f ) + E & + !)l e i> ' ( 5J2 ) 



where 



\ej) 



1 3 

Y, \j,m)®\j,a(m)), (5.73) 



m=-j 



2. Fidelity of aligning a Cartesian frame 

We now consider the task of aligning a Cartesian frame 
through the exchange of spin- 1/2 particles, using the fi- 
delity as the figure of merit (Bagan et al, 2004b; Chiri- 
bella et al, 2004b, 2005). 

We first develop the payoff function, which we require 
to be both left- and right-invariant. One such possibility 
is to use the mean deviation between Alice's coordinate 
axes and Bob's, i.e., 

/(Q'jQ) = 1 - | Y \ttn tA -n'n lB \ 2 , (5.67) 

i— x,y,z 

where fin denotes the vector obtained by rotating the 
vector n by f2 € SO (3). This function can be expressed 
in terms of the characters Xj(ty f° r SO(3); because these 
characters will be useful in the following, we briefly re- 
view them here. The characters of SO (3) are given by 
the trace of the irreps Rj as 

Xj (n) = Tv[R j (n)}. (5.68) 

Recall that any rotation O in SO (3) can be expressed as a 
rotation by ui, in the range < u> < 2ir, about some axis. 



are maximally entangled. 

From Eq. (5.54), the optimal fiducial signal state has 
the form 

N/2-1 
3=0 

where the coefficients (3j are to be determined. For sim- 
plicity and brevity, we will only solve this eigenvalue 
problem in the limit of large N. In this limit, the (3^/2 
term (the only exceptional term) can be ignored. 

As with the phase distribution problem, the goal is to 
find the state \if>} that maximizes 

= YPjP?M jj >, (5.75) 

3,3' 

where Mjj> is the matrix 

M jf = J df2 ( ej -| J R j (0)| ej -)(e J v|i? J .,(0)t|e / )/(0). 

(5.76) 
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We note that 

( ej \R 3 (n)\ ej ) 

1 j 

— ti>M R j( n )\j, m ')( a ( m )\ a ( m ')) 



2.7 + 



m,m——j 
3 



m=—j 



2j + 



(5.77) 



Thus, 



M n , oc /" dwx,-MxyM(J + JxiM) ■ (5.78) 

To evaluate this integral, one can make use of the or- 
thogonality properties of group characters; see Chiribella 
et al. (2004b) for details. We find that 

Mjf oc isjj. + + 8j-ij>) ■ (5.79) 

The eigenvalue problem, then, is essentially identical to 
that solved for the distribution of a phase reference in 
the previous section. In this limit, then, this maximum 
average fidelity scales as 



forAT»l. 



(5.80) 



Thus, this scheme also scales at the Heisenberg limit. 

We note that this particular task has given rise to some 
controversy and errors in the literature. In particular, 
a mistaken claim of optimality for this task in Bagan 
et al. (2001b), which resulted from a failure to include the 
multiplicity of irreducible representations, led to some 
confusion over the use of covariant measurements in this 
task (Peres and Scudo, 2002a). 



E. Reference frames associated with coset spaces 

A directional RF, for the z-axis say, can be obtained 
from a full Cartesian RF by throwing away the informa- 
tion about the azimuthal angle. To specify a direction, 
therefore, it is sufficient to specify an equivalence class 
of Cartesian frames, those related by an SO(2) transfor- 
mation about this axis. Hence, a directional RF is asso- 
ciated with an element of the coset space SO(3)/SO(2). 
This coset space is equivalent to 52, the space of points 
on a three-dimensional sphere, which corresponds to the 
possible directions in space. 

Thus, certain reference frames have distinct configu- 
rations which do not correspond to the elements of a 
group, but rather those of a coset space of a group. If 
we consider a reference frame for a group G but are un- 
concerned about the difference between those related by 
a subgroup Go of transformations, then we can speak of 



a reference frame for the coset space G/Gq. We may in- 
corporate such cases into the framework specified above 
by choosing our figure of merit to reflect the unimpor- 
tance of the subgroup in the estimation task; i.e., choose 
a payoff function f(g'~ 1 g) that satisfies 



Rg'-'ggo) = Rg'-'g) , v 9o e G 



(5.81) 



In other words, we imagine choosing signal states and 
POVMs that are covariant for a group G that is a cover- 
ing group for the coset space in question. Let z be a set 
of coset representatives, i.e., z G G/Go, and let dz be a 
left-invariant measure on G/Gq- Then, using Eq. (5.48), 

f = J dgp(g)f(g) 

= dz ( / d goP( z go))f(z) 

J G /Go J Gq 

= / dzp inv (z)f(z) . 

J G I Go 

Here, we have defined 



(5.82) 



Pinv(z) 



/ d ff0 

J Go 



p(zg ) 



= Tr ( / dgoU(zgo)\e){e\Ul(zg ))W){l 
= Tr[U(z)E inv U<f(z)\iP)(iP\] , (5.83) 



where 



E iav = f dg U(g )\e}(e\UHg ), (5.84) 

J Go 

is Go-invariant. Thus, for any covariant measurement 
with fiducial POVM element |e) that achieves the opti- 
mum figure of merit, there exists a Go-invariant covari- 
ant measurement with fiducial POVM element -E; nv that 
achieves the same optimum. For this reason, we may as 
well restrict the fiducial signal state and fiducial POVM 
element to be Go-invariant. 

We note that, if the group Go is non-Abelian, it may 
not be possible to find a pure state that is invariant un- 
der the subgroup. In such a situation, if one wishes to 
work with Go-invariant states and measurements, then 
one will have to use mixed fiducial states and POVM 
elements (Chiribella and D'Ariano, 2004a). We now con- 
sider an example with an Abelian group Go, for which 
these complications do not arise. 



1. Aligning a direction 

Consider the task of optimally aligning a direction in 
space through the exchange of spin-1/2 particles. This 
was first considered for just two particles by Gisin and 
Popescu (1999); Massar (2000), as discussed in Sec. V.A. 
The problem was subsequently considered for an arbi- 
trary number of particles by Bagan et al. (2000, 2001a); 
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Peres and Scudo (2001a). (For a related investigation, 
wherein it is addressed how to perform this task using 
product states, see Bagan et al. (2001b).) 

Let |^>W) be the fiducial signal state. Again, we re- 
strict our attention to the case of N even. Because we are 
concerned only with aligning a direction and not a full 
Cartesian frame, we can choose \ip( N *>) to be invariant un- 
der rotations about the z-axis without loss of generality. 
Any such pure invariant state is an eigenstate of J z ; thus, 
choose to be an eigenstate of J z with eigenvalue 

hm. Clearly, m must be in the range —N/2, . . . , N/2. 

First, some notation. It is standard to express a rota- 
tion in SO (3) in terms of its Euler angles (a, (3, 7). Specif- 
ically, a unitary rotation operator can be expressed as 



R(a,0,'y)=R z {a)R y {P)R I {'r), 



(5.85) 



where R y and R z are SO (2) rotations about the y- and 
z-axes, respectively. For any element in SO (3), a set of 
Euler angles can be found in the range < a, 7 < 2n 
and < /3 < tt. The invariant subgroup is Go =SO(2) 
in this problem, rotations about the z-axis; thus, the 
parameters (a, (3) provide coordinates for the coset space 
SO(3)/SO(2). 



a. Maximum likelihood. We now maximize the likelihood 
of a correct guess. Restricting the fiducial POVM ele- 
ment to be SO(2)-invariant, it takes the form 



N/2 



\eW) = '£ t y/2jTT\j,m). 



(5.86) 



As we wish to include all possible irreps j, following the 
general construction of Sec. V.B, we should choose m = 
0, i.e., a fiducial POVM element 

N/2 



| e W) = £ v /27TT|j,0). (5.87) 

3=0 

The signal state should then be parallel to this vector, of 
the form 

1 N/2 

l ^ N)) = {N/2+iy E V^J + T|i, 0) , (5.88) 

and the maximum likelihood density of a correct guess is 
/W = (N/2 + l) 2 . (5.89) 



that this is the generalization of the example provided 
in Sec. V.A from two to an arbitrary number of spin-1/2 
systems. 

Again, the fiducial POVM element is essentially 16 con- 
strained to be that of Eq. (5.87), and now the signal state 
takes the general form 

N/2 

IV> W >=£ 6 ,IJ'°>' (5.90) 
j=o 

where the coefficients bj are to be determined. The Born 
rule yields 

p(a,(3,0) = \(ipW\R® N (a,f3,0)\eW)\ 2 . (5.91) 

This quantity is independent of a, and thus the relevant 
conditional probability is 

p((3) = \(ijW\R® N (0,f3,0)\e {N) )\ 2 . (5.92) 

Note that R® N (0,/3,0) = R® N (/3) (a rotation about the 
y-axis) and the reduced Wigner matrix d J 00 ((3) is given 

by 



4 ((3) = {j,0\R y ((3)\j,0) 
= Pj (cos f3), 



(5.93) 



where Pj (x) is a Legendre polynomial. 

The operator M of Eq. (5.50) is given in this instance 
by the matrix 

M jjt = (j,Q\M\j' ,Q) 

= \\ sin/3d/3P J (cos/3)P,v(cos/3)cos 2 (/3/2) 
Jo 

= \ J dxP 1 (x)P 1 ,(x)(P (x) + Pi (a;)) 

_ l ( 2 x J 22 c 

- 4\2j+l°j,j' "+" (2j+l)(2j'+l)°J.J'+l 



+ 



(2j+l)(2j'+l) 



' _i_i ^ ^7.7' 



(5.94) 



where we have expanded the payoff function in terms of 
Legendre polynomials. 

This eigenvalue problem is essentially the same as those 
solved in the previous section. The maximum average 
fidelity is given by 



ymax 



1 + XN/2+1 



(5.95) 



b. Fidelity. A natural payoff function for this problem is 
the inner product between Bob's guess direction n g and 
Alice's transmitted n, given by f(9) = (1 + n g ■ n) = 
cos 2 (6>/2), where is the angle between their directions. 
This payoff function is also known as the fidelity. We 
provide the details for this optimization as well. Note 



16 The choice of m = 0, necessary to optimize the maximum likeli- 
hood problem, is not a priori optimal for maximizing the aver- 
age fidelity. However, m can be left free and then optimized at 
the end, with the result that m = is indeed optimal for this 
task (Peres and Scudo, 2001a). 
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where xjj/2+1 is the largest zero of the Legendre polyno- 
mial Pn/2+i( x )- ln the limit of large N, this maximum 
average fidelity scales as 

f aX ~ 1 - -1=9 . fOT N » 1 . ( 5 - 96 ) 

where C — 2.4. Thus, this optimal scheme also scales 
at the Heisenberg limit (Bagan et al, 2001a; Peres and 
Scudo, 2001a). 

F. Relation to phase/parameter estimation 

We note that the task of aligning a phase reference 
is essentially equivalent to the task of estimating an un- 
known phase. Specifically, instead of viewing the problem 
of noiseless transmission of a quantum system between 
parties who do not share a phase reference, the prob- 
lem could instead be viewed as one of transmission of 
the same quantum system between parties who do share 
a phase reference, but where the transmitting channel 
induces an unknown phase shift on the system. 

In this light, we note that the protocol presented in 
Sec. V.D.I is equivalent to the optimal solution for phase 
estimation using the same figure of merit (Berry and 
Wiseman, 2000). Techniques for quantum- limited phase 
estimation have been well studied, and there exist a wide 
variety of alternate methods that could each be applied, 
in some form, to the task of aligning a phase reference. 
For an overview of phase estimation techniques from dif- 
ferent viewpoints, we refer the reader to the review article 
on quantum metrology by Giovannetti et al. (2004a), or 
the text of Nielsen and Chuang (2000) which discusses 
phase estimation techniques from a quantum algorithm 
perspective. Also, see Giovannetti et al. (2006) for a uni- 
fied framework of these techniques. 

Similarly, the task of aligning a reference frame for 
G through the transmission of a quantum system is es- 
sentially equivalent to estimating an unknown element 
9 £ G given a quantum channel that acts on the same 
quantum system with the unitary U(g). This latter task 
is generally referred to as parameter estimation. 

We note, then, that the scheme for aligning a Carte- 
sian frame presented in Sec. V.D.2 is closely related to a 
method for estimating an unknown SU(2) (or more gener- 
ally SU(d)) transformation (Acin et al, 2001). We briefly 
review this latter scheme, because of its close relation to 
the topic at hand. Let i?(f2) be the unitary representa- 
tion of an unknown rotation f2 € SU(2), which acts on 
states of a Hilbert space H; the task is to estimate f2 
through one application of R(Q) to some quantum state. 
For this problem, we allow the use of an ancillary system, 
with Hilbert space K. of arbitrary dimension; this ancilla 
is assumed to transform trivially under SU(2). (That is, 
SU(2) acts as R(fl)®I on H®K,.) Without loss of gener- 
ality, one can choose dim/C = dimH, and choose a basis 
for JC with the same labels as H. We choose the standard 
SU(2) angular momentum basis \j, m, a), where a labels 
the multiplicity. 



An optimal state on H.<gilC for maximizing the like- 
lihood of a correct guess, up to a normalization constant, 
is 

N/2-1 ^ j 
l^> a 12 /(2- + l)c- 12 12\j' m ' a )n\j,'m,a) K :, 

j—0 V V $ '3 m— — j a— 1 

(5.97) 

where Cj is the multiplicity of the jth representation. The 
fiducial POVM element will be parallel to this vector. 
We note that this state is a superposition over irreps j 
of a maximally-entangled state between an irrep j on H 
and an equally-sized space on JC. The optimality of this 
state for alignment follows from the general arguments 
presented in Sec. V.C: the optimal fiducial state is the 
one that maximizes the dimension of the group orbit. 
Without the help of an ancilla, this is achieved within a 
given irrep j by entangling the gauge space Mj (on which 
the group acts nontrivially) with the multiplicity space 
Afj (on which it acts trivially). In the present context, it 
is achieved by entangling the system with the ancilla. 

As such methods for parameter estimation have im- 
portance for quantum computing in terms of the charac- 
terization of quantum gates, it is interesting to consider 
how the methods of reference frame alignment may be 
applied to such characterization problems as well. 

Finally, work on magnetometry - the use of magnets as 
direction indicators to determine the strength and direc- 
tion of a magnetic field - is also a problem of parameter 
estimation, closely related to the problem of reference 
frame distribution. Practical proposals for quantum- 
limited magnetometry make use of spin-squeezed clouds 
of cold atoms to measure the three components of an 
unknown magnetic field through a form of phase esti- 
mation (Petersen et al., 2005). It would be interesting to 
investigate whether spin-squeezed states of indistinguish- 
able particles (e.g., atoms) can be used for the distribu- 
tion of a direction or frame as efficiently as the optimal 
protocols derived above, which make use of (distinguish- 
able) qubits in highly-entangled states and corresponding 
entangling measurements. 

G. Communication complexity of alignment 

We have thus far only considered protocols for RF 
alignment wherein there is a single round of commu- 
nication from Alice to Bob. We now consider multi- 
round protocols (de Burgh and Bartlett, 2005; Giovan- 
netti et al, 2006; Rudolph and Grover, 2003). Whereas 
the single-round protocols generally require entangle- 
ment between the transmitted systems to achieve the 
Heisenberg limit, multi-round protocols have the advan- 
tage that they can achieve this limit despite using no 
entanglement. 

With multi-round protocols, it is natural to frame the 
problem as one of communication complexity, wherein 
one investigates the resources of rounds of communi- 
cation along with the standard resources of number of 
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transmitted quantum or classical bits. To conform with 
standard notions of communication complexity, it is use- 
ful to consider the alignment problem with two depar- 
tures from the approach adopted in analyzing the pre- 
vious alignment protocols. First, we consider the worst 
case scenarios (rather than the average case considered 
above); second, we avoid the use of payoff functions, such 
as the fidelity, with a view to obtaining a more precise 
estimate of how well any given instance of the protocol 
has performed. As such, we consider strategies for align- 
ing spatial reference frames that allow Bob to directly 
determine the angle which relates his and Alice's RFs to 
some specified accuracy with a bounded probability of 
error in the worst case scenario. More precisely, if 9 is 
an angle relating Alice and Bobs' RFs, and 9' is the es- 
timation of 9 inferred by Bob, then we will be interested 
in the amount (and type) of communication required for 
protocols that achieve P rror = Pr[|0 — 9'\ > 5] < e, for 
some fixed e, 5 > 0. By setting 5 = l/2 k+1 we say that 
with probability (1 — e) Bob has a fc-bit approximation 
to 9. 

We now describe such a protocol for the case of sharing 
a phase reference through the exchange of qubits, i.e., the 
same task as investigated in Sec. V.D.I. This protocol 
can also be applied to the task of aligning a Cartesian 
frame (Rudolph and Grover, 2003). The effects of deco- 
herence on these protocols has been shown to be equiv- 
alent to that of decoherence on the "standard" protocol 
of Sec. V.D.I (Boixo et at, 2006). 

Let 9b a be the unknown angle (misalignment) that 
relates Bob's phase reference to Alice's. In this protocol, 
Alice and Bob use an algorithm that estimates each bit of 
the phase angle 9b a independently We define the phase 
angle 6b a = itT, where T has the binary expansion T = 
0^1*2^3 • • • • Alice and Bob will attempt to determine T 
to k bits of precision, and accept a total error probability 
-Perror < e. If the total error probability is to be bounded 
by e, then each ti, i = 1, . . . , k, must be estimated with 
an error probability of e/k. (An error in any one bit 
causes the protocol to fail, so the total error probability 
in estimating all k bits is P crr0 r = 1 — (1 — e/k) k < e.) 

To estimate the first bit t\, Alice prepares a single 
qubit in the state (|0)a + \1)a)/V% (relative to her phase 
reference) and sends the qubit to Bob. Bob then per- 
forms his operation Xb and sends the qubit back to Al- 
ice, where Xb is the Pauli bit-flip operator according 
to Bob. She then performs her operation X A . The re- 
sulting combined transformation XaXb is described in 
Alice's frame as 



uncertainty of 



X A X B = X A (e- ieBAZ ' 2 X A e +MBAZ / 2 ) 
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(5.98) 



where Z is the Pauli phase-flip operator. Finally, Alice 
performs a Hadamard transformation H A (in her frame) 
and measures the observable A = —Z. The expected 
value of this observable is (O a ) = cos(2$b A ), with an 



AO A = y/ (0 2 A ) - (O a ) 2 = sin (29 BA ) ■ 



(5.99) 



Expressing (O a ) in terms of T, we have 

(O a ) = cos (29 BA ) = cos (2tt0.M 2 ■ ■ ■ ) ■ (5.100) 

By repeating this procedure n\ times, i.e., sending ni 
indep enden t qubits and averaging the results, Alice ob- 
tains {0 A ), the estimate of (0 A ). If n\ is chosen such 
that \{0 A ) — (O a )\ < 1/2 with some error probability, 
then \T — T\ < 1/4, thus determining the first bit t\ with 
this same probability. The required number of iterations 
n\ to achieve the desired error is given by the Chernoff 
bound, with 8 = 1/4. That is, the probability that the 
first bit of Alice's estimate (O a ) differs from the first bit 
of the actual value {Oa} decreases exponentially in the 
number of repetitions n\ , and is bounded explicitly by 

Pr[|"(0^y - (O a )\ > 1/2] < e/k < 2e- ni/32 . (5.101) 

Thus, allowing a probability of error e/k in this bit, we 
require n\ > 321n(2fc/e) iterations. 

Now we define a similar procedure for estimating an 
arbitrary bit, tj+\. Alice prepares the energy eigenstate 
|0), and performs her H A operation. Alice and Bob then 
pass the qubit back and forth to each other 2- 7 times, 
each time Bob performs his Xb operation and Alice per- 
forms her X A operation. That is, they jointly implement 
the operation (X a Xb) 23 ■ Finally Alice performs her H A 
operation. Expressing these operations in Alice's frame, 
the protocol to estimate tj + \ produces the state 

\^) A = H A (X A X B f H A \0) 



H A (e 



+iu)tABZ\2 
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= [ism{2^t BA )\0) +cos(2^t B A)\l)] A - (5.102) 

Alice then measures the observable O a = —Z. The ex- 
pected value of this observable is: 

(0 A ) = cos {V +1 ujt BA ) 

= COS^' [27T0.M2 • • •]) 

= cos(27rfii2 • • ■tj-tj+itj+2 • • • ) 

= cos(27r0.tj+itj +2 ■ ■ ■ ) • (5.103) 

This expression has the same form as one iteration of the 
scheme to estimate the first bit t\\ Alice and Bob sim- 
ply require more exchanges to implement (X a Xb) 2J ■ To 
get a probability estimate for each bit tj+i, this more 
complicated procedure is repeated nj+i times. Because 
we require equal probabilities for correctly estimating 
each bit, we can set all rij+i equal to the same value, 
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n ~ 32 ln(2fc/e). Thus the total amount of qubit commu- 
nication N c required to obtain bits t\ through tf, by this 
procedure is 

k 

N c = nx S £ j 2 j - 1 =n(2 fc -l) = (9(2 fe ln(2fc/e)). (5.104) 

To facilitate comparison with the previous sections, 
wherein the focus was on maximizing the average fidelity, 
we imagine that Alice and Bob use the above protocol 
to obtain, with probability (1 — e), an angle 9' which is 
a "fc-bit" estimator of the true angle 9, i.e., they obtain 
\9-9'\ < 2n/2 k+1 with probability (1-e). The fidelity of 
this estimate is / = cos 2 ((# — 9')/ 2). Since cos a; > 1 — x 2 
we have that / > 1 — (§f) 2 - To compare with the av- 
erage case fidelity computed previously, we assume that 
when the protocol fails (which happens with probability 
e) the fidelity obtained is 0, i.e., worse than a random 
guess. We have then that the expected fidelity from this 
protocol satisfies 



/>(i-4-(l) 



(5.105) 



If we take e = l/2 2fe , then the total number of qubit 
communications scales as k2 k for large k, while the ex- 
pected fidelity / scales as 2~ 2k ~ 1 - (log V c )/V 2 . Thus, 
remarkably, this protocol beats the standard quantum 
limit of 1/N C , yet does not require entangled states or 
collective measurements. This is achieved at the cost of 
an increased complexity in coherent qubit communica- 
tions. 



H. Clock synchronization 

If Alice and Bob share a common frequency standard, 
then they can use techniques for phase reference align- 
ment that were outlined above to perform clock synchro- 
nization, i.e., aligning a temporal reference (Jozsa et ai, 
2000). To sec the relation between phase alignment and 
clock synchronization, it is easiest to work in a rotating 
frame (interaction picture) in which states are described 
as \ip)i = e %H ° t / fi \ip), and observables and transforma- 
tions as Ai = e iH a t/h Ae -iH t/n^ w here H is the free 
Hamiltonian. In this rotating frame, states are stationary 
under free evolution, and the problem of clock synchro- 
nization is reduced to one of aligning a phase reference. 

In one class of clock synchronization protocols based 
on phase estimation, the systems exchanged are ticking 
qubits: nondcgenerate two-level quantum systems that 
undergo time evolution (Chuang, 2000). Much like phase 
estimation, the use of entangling operations and/or mea- 
surements can lead to different scalings in the synchro- 
nization accuracy. For example, a protocol that uses only 
separable (unentangled) ticking qubits and singlc-qubit 
measurements requires 0(2 2fe ) ticking qubit communica- 
tions (a coherent transfer of a single qubit from Alice to 
Bob) to achieve an accuracy in the time offset of Alice's 



and Bob's clocks of k bits. That is, the synchroniza- 
tion accuracy scales as the standard quantum limit. In 
comparison, a protocol by Chuang (2000) makes use of 
the Quantum Fourier Transform and an exponentially 
large range of qubit ticking frequencies. This protocol 
requires only 0(k) quantum messages to achieve k bits 
of precision, an exponential advantage over the standard 
quantum limit. Although this protocol gives insight into 
the ways that quantum resources may allow an advan- 
tage in clock synchronization, it is unsatisfactory for two 
reasons: (1) its use of exponentially demanding physi- 
cal resources is arguably the origin of the enhanced effi- 
ciency (Chuang, 2000; Giovannctti et al., 2001); and (2) 
Alice and Bob need to a priori share a synchronized clock 
in order to implement the required operations as defined 
in Chuang (2000). These problems arc not present in 
subsequent protocols based on ticking qubits, which used 
the techniques for phase estimation presented in Sec. V.G 
to design a clock synchronization protocol that operates 
near the Heiscnbcrg limit (dc Burgh and Bartlctt, 2005). 
The Heisenberg limit for clock synchronization can be 
achieved by making use of the phase estimation protocol 
of Sec. V.D.I. 

Distinct from the approaches based on phase estima- 
tion, there has been considerable interest in another class 
of clock synchronization protocols which make use of 
entanglement (Jozsa et ai, 2000); see also Burt et al. 
(2001); Jozsa et al. (2001); Preskill (2000); Yurtsever 
and Dowling (2002). In a variant of this approach, a 
third party Charlie distributes a large number of boxes 
to Alice and Bob, where each box contains one spin of 
a spin singlet. Each box also contains a classical mag- 
netic field aligned in the z-direction, such that the free 
Hamiltonian for each spin is Ho = x <J z for some con- 
stant energy \- (We note that this establishes a shared 
RF between Alice and Bob for this particular direction.) 
Clock synchronization can be achieved by Alice perform- 
ing measurements on her spins in her a;-direction at time 
t = 0. By informing Bob (via any classical channel) 
as to the sub-ensemble of the singlets for which she ob- 
tained the +x outcome, Bob can identify the subset of 
his particles which are all precessing (via the free Hamil- 
tonian) around the common ^-direction in phase with 
Alice's clock. However because Bob does not necessarily 
share a common rr-dircction with Alice, he cannot actu- 
ally read out this phase information. This complication 
can be neatly circumvented with a slight modification 

on half of the particles, Alice and Bob use a differ- 
ent magnetic field strength in the z-direction to establish 
two different precession frequencies. Bob can now choose 
any x-direction to measure each subensemble, because 
both ensembles of precessing spins are offset by the same 
unknown phase shift with respect to Alice's spins, and 
he can achieve synchronization by merely observing the 
beats between the oscillations. 

In the language of the final section of this review, we 
can understand this protocol as one in which standard 
refbits (see Sec. VI. D for more details) are being distilled 
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from the initial singlets and put to use as a bounded 
shared RF. Note that if such synchronization was Char- 
lie's intention all along, then such a protocol would not 
be a particularly efficient use of resources - he could just 
as simply have distributed to Alice and Bob a shared 
RF state (such as those given in Eq. (3.28), for exam- 
ple) which require no entanglement whatsoever (Preskill, 
2000). 17 This fact, together with the result that this 
entanglement cannot be purified (an issue we return to 
in Sec. VI. E), suggest that shared entanglement between 
two parties does not provide an advantage for clock syn- 
chronization (or other forms of RF alignment). 

A third class of protocols for clock synchronization 
make use of precise timing of light signals exchanged be- 
tween parties, and for which the quantum limits have 
recently been investigated. Instead of classical coherent 
state light pulses for the signals, one can use highly en- 
tangled states of many photons and beat the standard 
quantum limit (Giovannetti et al, 2001). Essentially, 
the advantage is due to entanglement-induced bunching 
in arrival time of individual photons, enabling more ac- 
curate timing measurements. The key disadvantage of 
this technique is that the loss of a single photon de- 
stroys the entanglement and renders the measurement 
useless (Giovannetti et al, 2001, 2004a), although tech- 
niques have been developed to "trade off" the quantum 
advantage in return for robustness against loss (Giovan- 
netti et al, 2002). Furthermore, the effect of dispersion 
is known to be an important issue with such protocols, 
with the use of entanglement possibly offering an advan- 
tage here as well (Fitch and Franson, 2002; Giovannetti 
et al, 2004b). We note that such protocols differ from 
those based on phase estimation in that they make use 
of relativistic principles (specifically, the constancy of the 
speed of light). 



I. Other instances of alignment 

Above, we considered the alignment of Cartesian 
frames using N spin- 1/2 systems. A different approach 
to this alignment problem is to use a single Hydrogen 
atom (Peres and Scudo, 2001b). The analysis of this 
task is similar to that presented above, with the notable 
difference that multiplicities of representations of SO (3) 
are not available with the hydrogen atom. Also, the use 
of elliptic Rydberg states of the hydrogen atom have been 
considered for this problem, with resulting fidelity com- 
parable with that of the optimal scheme for a hydrogen 
atom (Lindner et al., 2003). 

Although a phase reference (clock) and spatial direc- 
tion (or Cartesian frame) may be the most ubiquitous 



An analogue of this scheme for Cartesian frame alignment has 
been proposed (Rudolph, 1999a), and similar reservations apply; 
however, at least this latter approach was motivated by a funny 
story (Rudolph, 1999b). 



types of reference systems, it is possible to distribute 
more general and exotic types of reference frames through 
the exchange of appropriate quantum systems. 

For example, consider the distribution of a reference 
ordering, i.e., a labeling of N objects (von Korff and 
Kempe, 2004). Through the use of techniques similar 
to those described in Sec. V.D.2 for the distribution of a 
Cartesian frame, one can construct an optimal protocol 
that distributes an ordering of N particles using N sys- 
tems with dimensionality N/e. (In contrast, the classical 
problem requires N systems each with N distinguishable 
states.) 

Another problem is the distribution of a reference 
frame for chirality (Collins et al, 2005; Diosi, 2000: 
Gisin, 2004). Such quantum systems have been given 
the moniker "quantum gloves" . Clearly, a full Carte- 
sian frame includes a reference for chirality; however, dis- 
tributing a full Cartesian frame purely for the purposes 
of distributing a reference chirality is not very econom- 
ical, and more efficient methods are possible. Also, a 
chiral reference can be distributed perfectly, i.e., with no 
error, with only finite quantum resources. Methods for 
the distribution of a chiral reference using only two kinds 
of particle (i.e., a proton and an electron) and only four 
spinless particles, along with other interesting combina- 
tions, can be found in Collins et al. (2005). 

One can also consider the problem of secret sharing of 
unspeakable information (Bagan et al, 2006b). In such 
a protocol, a quantum state is shared between several 
parties with the aim that a reference frame can only be 
determined if all of the parties come together (to per- 
form collective operations and measurements). Parties 
working alone, or together using only LOCC, cannot de- 
termine the reference frame with the same precision. 



J. Private communication of unspeakable information 

With the development of optimal schemes for the dis- 
tribution of a reference frame, it is natural to consider 
how two parties, Alice and Bob, can perform such a 
distribution privately by using some number of shared 
secret bits - a classical key - to randomize the signal 
state (Chiribella et al, 2006). In other words, we con- 
sider the problem of how well two parties can convert a 
private classical key into a private shared RF (of bounded 
size) using a public channel and given that they do not 
previously possess a shared RF (private or public). For 
concreteness, we investigate the private communication 
of a Cartesian frame. 

Consider the optimal scheme for the distribution of 
a Cartesian frame using fidelity as the figure of merit 
(which achieves the Heisenberg limit). The fiducial signal 
state for this scheme is given in Eq. (5.74). (The scheme 
will be essentially identical for any figure of merit.) As 
with any private quantum communication, Alice and Bob 
can choose unitary operators from a set of unitaries, 
based on their classical key, to randomize any quantum 
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state as viewed by an eavesdropper Eve who does not 
share this key, using the techniques of Ambainis et al. 
(2000). In general, to completely randomize a state on 
a Hilbert space of dimension d = 2 N , Alice and Bob re- 
quire a key consisting of 2iV secret bits. However, we 
note that Alice and Bob do not share a reference frame 
to begin with and thus they can only perform correlated 
operations on the multiplicity spaces j\fj. Despite this 
restriction, a complete randomization can be achieved 
for the fiducial state of Eq. (5.74). To see this, recall 
that this state can be expressed as a coherent superpo- 
sition, over all representations (charge sectors) of SO (3), 
of maximally- entangled states across the representation 
space Mj and an equally-sized subspace TV} of the multi- 
plicity space. Because of this particular structure of the 
fiducial state, a complete randomization over just the 
subsystems A/} will take every signal state to the same 
mixed state (and thus achieves a complete randomization 
on the Hilbert space that is the span of the supports of 
the signal states) . The dimension of each subsystem Afj 
is equal to that of A4j, namely, dj = 2j + 1, thus requir- 
ing 21og 2 (2j + 1) secret bits to completely randomize. 
The total number of secret bits required to completely 
randomize all the signal states is 

N/2 

log 2 [^(2j + l) 2 ] ~31og 2 iV. (5.106) 

3=0 

Thus, through the transmission of N qubits on a pub- 
lic channel and using 3 log 2 N classical bits of private 
key, one can achieve the distribution of a private Carte- 
sian frame at the Hciscnbcrg limit, which is to say with 
an error that scales as 1/N 2 . We note that this num- 
ber 3 log 2 N is identical to the number of classical bits 
that can be transmitted privately given a private shared 
Cartesian frame as key, as discussed in Sec. III.D. 



K. Dense coding of unspeakable information 

Consider the following problem. Alice wants to send 
Bob classical information, but at the time that Alice 
learns which message she would like to send Bob, the 
cost of using the quantum channel is very high, whereas 
earlier, before Alice learns the message, the cost of using 
the channel is low. Dense coding allows Alice to make 
use of the channel at the early time, prior to learning 
the message she wishes to send, in order to increase the 
amount of information she succeeds at transmitting to 
Bob at the later time. 

Suppose that Alice wishes to send to Bob a direction 
in space rather than a classical message. Suppose more- 
over that at the time where Alice learns the direction 
she would like to send Bob, the cost of using the quan- 
tum channel is very high, whereas earlier, before Alice 
learns the direction, the cost of using the channel is low. 
One would have a natural analogue of dense coding to 
unspeakable information (directional information in this 



case) if use of the channel at the early time allowed Bob 
to estimate Alice's direction with greater accuracy at the 
later time. 

The following is such an analogue. Alice prepares a 
pair of spin-1/2 systems in a singlet state, and in the 
first use of the channel, sends one of these to Bob. Later, 
when she has a sample of the classical direction n that 
she would like to send to Bob, she implements a unitary 
rotation of tt degrees about n on her spin-1/2 system and 
sends it to Bob. Through Alice's operation, the singlet is 
transformed into (|+n)|— n) + \—h}\+n})/^/2, which is a 
two-spin state that can be used to indicate the direction 
n; in fact, given that the image of such a state under 
SU(2)-averaging covers the entire symmetric subspace, 
this state is as good a direction indicator as the parallel 
spin state of Sec. V.A. In her second use of the quantum 
channel, she sends her spin to Bob, and Bob estimates 
the direction. The optimal average fidelity that can be 
achieved for such a state and measurement was shown in 
Sec. V.A to be 3/4, which is greater than the fidelity of 
2/3 that could be achieved using a single spin-1/2 sys- 
tem. 18 Thus, this scheme provides an analogue of dense 
coding for unspeakable quantum information. The opti- 
mization of this sort of dense coding scheme has not been 
investigated to date. 

A slightly different analogue of dense coding of un- 
speakable information was considered in Bagan et al. 
(2004a), building on the results of Acin et al. (2001). 
This protocol involves Alice initially sending Bob half of 
an entangled state over multiple spin systems. It is as- 
sumed that subsequently the entire lab of the sender is 
subject to the same SU(2) transformation that her half 
of the entangled pairs are subject to. Under this as- 
sumption the three parameters describing the relation of 
her spin-1/2 system to that of the receiver also describe 
the relation of her local Cartesian frame to that of the 
receiver. In this scenario, the sender is essentially pas- 
sive: both the spin and the local Cartesian frame must 
be acted upon by some external agency. Unfortunately, 
it is not clear whether this is of practical significance in 
the most common case where the SU(2) transformation 
acting on the local Cartesian frame is a rotation in space. 
For instance, if a rotation of the entire laboratory is real- 
ized by an external torque, it is not clear that the state of 
a spin-1/2 system stored in this laboratory (i.e., in some 
trapping potential) will necessarily undergo the same ro- 
tation. 19 Nonetheless, the optimal solution for this sort 
of scheme has been provided for an arbitrary number 



18 The optimal average fidelity that can be achieved for a symmetric 
product state consisting of TV spin-1/2 systems (a parallel state) 
is (N + l)/(A r + 2), and this result generalizes to any symmetric 
pure state (Massar and Popcscu, 1995). 

19 That is, unless the spin degrees of freedom are coupled to other 
fields in the lab. This coupling itself would negate the protocol 
however, as it implies some ongoing active transformations on 
the stored spins. 
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of spin-1/2 systems (Bagan et ai, 2004a). The optimal 
state bears a strong similarity to the optimal state for 
aligning Cartesian RFs, presented in Sec. V.D.2. 



L. Error correction of unspeakable information? 

We end this section with a cautionary note on the po- 
tential use of quantum methods for aligning reference 
frames, first made by Preskill (2000) for the specific task 
of clock synchronization: that the standard techniques of 
quantum error correction cannot be directly applied to 
unspeakable information. 

Consider a situation wherein Alice and Bob wish to 
align their respective frames by exchanging quantum sys- 
tems via some noisy quantum channel. Let T be the 
decohering superoperator describing the channel. The 
form of this noise is critical to their ability to complete 
this task; here, we consider only two extreme cases. If 
the noise is of the form T = ® q lM q ®T^N q m terms of the 
decomposition of Eq. (2.24), where T>^ is the completely 
depolarizing superoperator on N '. This noise affects only 
the multiplicity subsystems; in other words, it acts only 
on the relational degrees of freedom of the transmitted 
systems. In such a case, RF alignment is still possible 
(although possibly at a decreased efficiency, as the opti- 
mal protocols took advantage of these multiplicity sub- 
systems). Alice and Bob can choose to transmit states 
that are encoded entirely within the gauge subsystems 
M q , as these subsystems are decoherence-free in terms 
of the noise. 

On the other hand, if the noise is of the form T = 
®qE > M q ®lN' q in terms of the decomposition of Eq. (2.24), 
then the gauge subsystems M q will experience com- 
plete decoherence. However, Alice and Bob cannot 
choose to execute their alignment protocol entirely within 
the decoherence-free multiplicity subsystems Af q , because 
these subsystems cannot carry unspeakable information 
(at least, not of this type). Whereas speakable infor- 
mation can be encoded into any desired subsystem, un- 
speakable information must be encoded into subsystems 
carrying the appropriate degree of freedom. 

This latter case can be worded as a simple physical ex- 
ample. Consider the alignment of a phase reference, using 
a noisy channel that simply adds a constant but unknown 
phase shift. If Alice and Bob use one of the techniques 
of this section to attempt to align their phase references 
using this channel, Bob will acquire an estimate of the 
phase difference between his and Alice's RFs. However, 
because Bob knows this estimate may differ from the ac- 
tual difference by some unknown shift, caused by the 
channel, he in fact has learnt nothing about the rela- 
tion between his phase reference and Alice's. There is no 
protocol that they can perform that will distinguish the 
unknown phase shift relating their RFs and the unknown 
phase shift applied by the channel, and thus alignment 
cannot be performed using this channel (Preskill, 2000; 
Yurtsever and Dowling, 2002). 



VI. QUANTUM INFORMATION WITH BOUNDED 
REFERENCE FRAMES 

In the reference frame alignment schemes of Sec. V, we 
determined which quantum states of a given bounded size 
were optimal in serving as a sample of the sender's clas- 
sical reference frame. The systems were ultimately mea- 
sured relative to the receiver's classical reference frame, 
so that the unspeakable information that they contained 
was essentially amplified to the macroscopic scale with 
some associated uncertainty. However, there will be sit- 
uations for which this amplification process is not ideal, 
and instead one should make direct use of the quan- 
tum RF itself. 20 Whatever purpose the recipient had 
in mind in trying to align his classical RF with that of 
the sender's, one can ask to what extent he could achieve 
this same purpose by storing his quantum sample of the 
sender's reference frame in his lab and thereafter using it 
in place of his classical RF. 

Furthermore, many quantum experiments involve 
mesoscopic or even microscopic systems that can be un- 
derstood as playing the role of a reference frame. For 
instance, a Bose-Einstein condensate may act as a ref- 
erence frame for the phase conjugate to atom number, 
even though it may contain a relatively small number of 
atoms. We are therefore led to consider the question of 
how well a bounded-size quantum system may stand in 
for a classical reference frame. 

In Sec. IV we have already considered the problem 
of treating reference frames within the quantum formal- 
ism, but the system instantiating the reference frame 
was assumed to be of unbounded size. Here we shall 
be interested in bounded-size quantum reference frames. 
We shall focus in particular on the implications of such 
RFs on one's ability to perform quantum-information 
processing tasks, specifically: the fundamental primitive 
of quantum state estimation, operations and measure- 
ments in quantum computation, and the quantum cryp- 
tographic protocols of data hiding and bit commitment. 
Furthermore, we demonstrate that for bounded shared 
RFs, like entanglement, it is possible to develop a gen- 
eral theory of the manner in which this resource is dis- 
tributed, transformed from one form to another, distilled, 
degraded with use, quantified, etcetera. 

A. Measurements and state estimation with bounded 
reference frames 

State estimation is a fundamental primitive of quan- 
tum information processing. In this section, we discuss 
the role of reference frames in performing measurements 
required for state estimation, and the effect of bounding 
the size of this RF. 



For example, Janzing and Beth (2003) consider the constraints 
on amplifying and copying quantum RFs for phase. 
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1. A directional example 

Consider the task of estimating whether the state of a 
spin- 1/2 system is aligned or anti- aligned with some per- 
fect (unbounded) directional RF, given the promise that 
it is one of the two. If one is able to compare the system 
with this RF, then this task can be easily achieved, as it 
corresponds simply to discriminating a pair of orthogonal 
states, |+z) and |— z), where we take z to be the axis de- 
fined by the directional RF. Specifically, a measurement 
of S • z, the spin along z, determines the answer with 
certainty. In contrast, if one is not able to make use of 
this RF, then a superselection rule is in force, the mea- 
surement of S • z becomes impossible, and the states | +z) 
and |— z) become completely indistinguishable. 

There is an intermediate scenario between these two 
extreme cases, however, wherein one only has access to 
a sample of the RF - one that is of bounded size. In 
this case, |+z) and |— z) become partially distinguishable, 
as we now demonstrate with an example. We consider 
the case wherein the directional RF is a spin-j system, 
for some arbitrary but finite j, prepared in an SU(2) 
coherent state | jz) (the eigenstate of J • z associated with 
the maximum eigenvalue). 

Because the task is to estimate the relations between 
the bounded RF and the system, it is possible to restrict 
the measurement to one that is invariant under collec- 
tive rotations (i.e., rotations of both the bounded RF 
and the spin-1/2 system by the same amount). In other 
words, one can consider a global superselection rule as- 
sociated with the group SU(2) to apply, because the sys- 
tem serving as an RF for direction is treated internally. 
As a result, the form of the measurement is highly con- 
strained. Note that the joint Hilbert space Hj ® H1/2 
of the bounded RF and system decomposes into a sum 
7~ij+i/2 © 7~ij-i/2 of a J = j + 1/2 and a J = j - 1/2 
irreducible representation of SU(2), the group of col- 
lective rotations. By Schur's lemmas (see the Proof in 
Sec. II) a positive operator on this space that is SU(2)- 
invariant must have the form p + Tlj +1 / 2 + P-^-j-i/2j 
where n j±1 /2 is the projector onto 7~lj±i/2- Thus, a 
rotationally-invariant measurement is represented by a 
POVM with elements of this form. However, any such 
POVM may be obtained by classical post-processing of 
the outcome of the two-element projective measurement 
{n j+ i/2,nj_i/2}, so that the latter is the most informa- 
tive rotationally-invariant POVM. The POVM elements 
IIj+1/2 and Hj-i/2 are associated with the measurement 
outcomes "aligned" and "anti-aligned," respectively. 

Denote the probability that the state |±z) is found 
to be aligned with the bounded RF by p(+|±) and the 
probability that it is found to be anti-aligned by p(—\±). 
The Born rule 



p(±|±) = 0z|(±z|n j±1/2 |jz)|±z), (6.1) 



yields 

, . N 2^ + 1 ... 1 

P(+I+)= 27T2< PH+) =27T2< 

p(+|-) = 0, P(-l-) = 1- (6-2) 

Assuming equal prior probabilities for |+z) and |— z), the 
average probability of successful discrimination is 

Success = \p{+\+) + \p{-\~) = 1 - 4 (j + !) ■ (°) 

The smallest possible RF corresponds to taking j = 1/2, 
in which case p S ucccss = 5/6; see Pryde et al. (2005) for 
an experiment based on this example. For large j, we 
have a probability of success that approaches 1 linearly in 
1/j, and we recover perfect distinguishability as j — > 00, 
corresponding to the case of an unbounded RF. 

This example can be extended to the problem of esti- 
mating the relative angle between a spin ji and a spin 
]2] the optimal measurement is the projective measure- 
ment {II,/, J — \ji — j 2 \, . . . ,ji +32} onto the subspaces 
of total angular momentum J, for the same reasons as 
above (Bartlett et al., 2004b). The optimization prob- 
lem becomes nontrivial when we allow for states of the 
bounded RF and/or the system that span multiple irreps, 
i.e., states that are not eigenstates of J 2 . Measuring a 
spin-j system relative to a bounded directional RF con- 
sisting of a pair of spins is considered in Bagan et al. 
(2006a); Lindner et al. (2006). 

These sorts of results serve to illustrate how, for Lie 
groups at least, a measurement relative to a bounded RF 
cannot perfectly simulate one relative to an unbounded 
RF. Note that we have only considered the inferential 
but not the transformative aspect of the measurement, 
that is, we have not considered how the quantum state 
of the system is updated as a result of the measurement. 
The work of Wigner (1952) and of Araki and Yanase 
(1960) demonstrates, however, that for rank-1 projective 
measurements one cannot perfectly simulate a von Neu- 
mann update rule when an unbounded RF is replaced by 
a bounded one. 



2. Measuring relational degrees of freedom 

We note that measurements relative to a bounded 
quantum RF are example of measurements of relational 
degrees of freedom. While a complete discussion of re- 
lational formulations of quantum theory is beyond the 
scope of this review, we briefly make some connections 
between problems involving reference frames and rela- 
tional ones. 

The estimation of relative parameters for various de- 
grees of freedom encompasses such natural tasks as esti- 
mating the distance between two massive particles, the 
phase between two modes of an electromagnetic field (the 
essential aim of a homodyne measurement), or the angle 
between a pair of spins as described above, all of which 
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are clearly related to issues of bounded reference frames. 
Such measurements have been discussed recently in con- 
nection with their ability to induce a relation between 
quantum systems that had no relation prior to the mea- 
surement, e.g., inducing a relative phase between two 
Fock states (Javanainen and Yoo, 1996; Molmer, 1997; 
Sanders et al, 2003) or a relative position between two 
momentum eigenstates (Cable et al, 2005; Rau et al, 
2003). 

Also, measurements of relative parameters are crit- 
ical for achieving programmable quantum measure- 
ments (Dusek and Buzck, 2002; Fiurasek et al, 2002). 
Such measurements use the state of a quantum system 
(the reference system) to determine the form of a mea- 
surement performed on another system. For example, a 
reference system in an SU(2) coherent state as above can 
be used to "program" the choice of measurement basis 
of a spin-1/2 system. The problem of optimizing pro- 
grammable quantum measurements, including determin- 
ing the form of the joint measurement and the optimal 
state of the reference system, is directly related to the 
problem of optimizing measurements of relative parame- 
ters between a system and a bounded reference frame. 

Note that problems of relative parameter estimation 
are complementary to those of determining the optimal 
measurement schemes for estimating collective parame- 
ters for a rotational degree of freedom, the subject of 
Sec. V. 



B. Quantum computation with bounded reference frames 

1. Precision of quantum gates 

In the majority of architectures proposed for quantum 
computation, external classical fields are utilized to im- 
plement single qubit logical operations. As an example, 
we will focus on the use of coherent states of the elec- 
tromagnetic field, which are particularly ubiquitous for 
quantum computing architectures - in the form of either 
lasers or radio frequency fields generated by an oscillating 
current. From the perspective of this review, we inter- 
pret such fields as defining a reference frame - in this 
case, a clock - with respect to which coherent super- 
positions of the computational basis (energy eigenstate) 
states are necessarily defined. Note that the fact that 
the RF is interacting directly with the qubits does not 
weaken such a viewpoint - at some stage in the quantum 
information processing a clock must physically interact 
with the quantum computer (perhaps via intermediary 
systems); if it did not, then there would be no opera- 
tional difference if we enforced a superselection rule for 
energy. 21 



Previously, we have concerned ourselves primarily with SSRs for 
photon number when dealing with optical examples. However, 



If the reference frame is bounded - quantified in this 
example as a finite mean photon number of the laser 
field - the operations performed with respect to this 
bounded RF may have imperfect precision, and gener- 
ally the system and the field become entangled. A sim- 
ple and standard model of a single two-level atom reso- 
nantly interacting with a single mode (cavity) field via 
a Jaynes-Cummings interaction serves to illustrate the 
basic idea (van Enk and Kimble, 2001). The interaction 
Hamiltonian takes the form 

H = ihg(S + a-a^S-) , (6.4) 

where a is the field mode annihilation operator, and 
are the atomic raising and lowering operators. If 
the field mode is initially prepared as a coherent state 
| a) = e -*rM 2 £„(a"/\/^!)|n) with very large amplitude 
| a | 2 — > oo, it is common to replace the field operators 
a, a) with classical c-numbers a and a*. In the lan- 
guage of this review, this is the process of externalizing 
the reference frame. For an atom initially in the excited 
state, evolution under this classical field then yields the 
well-known Rabi oscillations between the ground |0) and 
excited state |1). Specifically, the state at time t is 

\1> c (t)) = sin( S |a|t)|0> + cos(5|a|t)|l) . (6.5) 

Consider now what occurs if we choose not to exter- 
nalize the driving field, and in particular describe it via 
a finite amplitude coherent state. The evolution of the 
atom and field under the Hamiltonian of Eq. (6.4) can be 
solved exactly, yielding 

oo 

W Q (t)) = J2 A n(t)\0)\n)+B n - 1 (t)\l)\n-l), (6.6) 

71=1 

where 

e -3l Q l 2 a™ _1 
A n (t) = sm(gV^t) , (6.7) 

V(n-l)! 

B„_i(t) = ' u = cos( 3 V^) • (6.8) 
V(n- 1)! 

To compare this evolution under a bounded refer- 
ence frame to the ideal (unbounded) case we should de- 
quantize the reference frame 22 using the techniques of 
Sec. IV. A. 2. Following the procedure outlined therein, we 
now move into the tensor product structure induced by 



in this section, as we are discussing the coupling of atoms to the 
optical fields under (additively) energy conserving Hamiltonians, 
we thus extend the type of SSR under consideration to one for 
total energy. 

This dequantization was not carried out in van Enk and Kimble 
(2001), although for this example it does not make a quantitative 
difference to the overall conclusions about gate fidelity. 
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energy difference (relational) versus total energy (global) . 
In terms of this tensor product structure we have 

oo 

KM*)) =^|^(*))rel|n-l)gl, (6.9) 
n=0 

where \<j) n {t)) rcl = (A n (t)\0) Tcl + B„-i(t)|l) rc i) is unnor- 
malized. 

The reduced density matrix of the relational system 
(i.e., we trace out the global degree of freedom) is there- 
fore a mixed state 

oo 

PQ(t) = X>n(*)Wn(*)| , (6.10) 
n=U 

and it is this mixed state we wish to compare with the 
pure state (6.5) expected in the unbounded, externalized 
description. 

We perform the comparison by computing the fidelity 
F(t) = (ipc(t)\pQ(t)\ipc(t)) between the mixed state ob- 
tained through the full quantum treatment and the pure 
state of Eq. (6.5) obtained via the above approxima- 
tion. If we consider the specific choice of evolution time 
t = n/(2\a\g), which corresponds to performing a a x 
gate, then this fidelity is very well approximated (even 
for small values of \a\) by (Harochc, 1984) 

F(t = m- g ) * \ (l - - (^g^K^fe) 

= 1 -TW + °(^)- ( 6 - U ) 

We see that the gate operation results in a state that is 
in error (as quantified by the fidelity) by an amount that 
is inversely proportional to the mean number of photons 
in the driving field. 

The extent to which such a model captures the essen- 
tial features of currently-proposed quantum computing 
architectures has been the subject of considerable de- 
bate, cf. van Enk and Kimble (2001); Gea-Banacloche 
(2002a,b); Gea-Banacloche and Ozawa (2005); Itano 
(2003); Nha and Carmichael (2005); Silberfarb and 
Deutsch (2003). What is clear is that such effects are 
generally about two orders of magnitude smaller than 
the typical spontaneous emission rates in these systems. 
However, in situations wherein the reference frame is 
small (for example, if quantum computers together with 
the control fields were to be built on chips in an inte- 
grated manner) or in systems which have negligible spon- 
taneous emission, then it is not unreasonable that such 
considerations will have to be incorporated into analyses 
of fault tolerance. 



2. Degradation of a quantum reference frame 

As we have demonstrated, a bounded reference frame 
can result in non-trivial limitations on one's ability to 



perform operations and measurements on quantum sys- 
tems, and thus limitations on quantum information pro- 
cessing tasks such as quantum computing. However, this 
imprecision is not the only limitation enforced by quan- 
tum mechanics. In addition, any measurement that ac- 
quires information about the relations between the sys- 
tem and RF must necessarily disturb them uncontrol- 
lably. The resulting disturbance to the RF can be un- 
derstood as a measurement back action. The effect of 
this back-action has been studied for reference frames 
for spatial position (Aharonov and Kaufherr, 1984), for 
directional reference frames (Aharonov et at, 1998) and 
for clocks (Casher and Reznik, 2000). Here, we investi- 
gate how measurement back-action on a bounded RF can 
lead to its degradation, i.e., a reduction of its suitability 
to perform future measurements. 

The conventional approach wherein reference frames 
suffer no back action may yield a poor approximation to 
the full quantum treatment, as suggested above. This 
issue may be particularly important for quantum com- 
putation, where a large number of high-precision mea- 
surements must be performed. In some implementa- 
tions, such measurements are performed relative to a 
reference frame that is usually described by a finite 
quantum system; for example, the proposed single-spin 
measurement technique using magnetic resonance force 
microscopy (Rugar et al, 2004), or the single-electron 
transistors used for measurement of superconducting 
qubits (Makhlin et at, 2001). We now demonstrate that 
the number of measurements for which a quantum refer- 
ence frame can be used scales quadratically rather than 
linearly in the size of the reference frame, which is a 
promising result for the prospect of using microscopic 
or mesoscopic reference frames in performing repeated 
high-precision measurements. 

In the following example, we investigate the degrada- 
tion of a quantum reference direction as it is used for 
repeated measurements. We use a spin-j system for our 
quantum reference direction (the RF), with Hilbert space 
TLj. We choose the initial quantum state of the spin-j 
system to be p^> = \j,j)(j,j\; this choice of initial state 
simplifies the analysis, and in addition it has been deter- 
mined to be the initial state that maximizes the initial 
success probability (Bartlett et al, 2006c). This quantum 
RF is aligned in the +z direction relative to a background 
frame. 

The systems to be measured will be spin- 1/2 systems, 
each with a Hilbert space Wi/2- We choose the initial 
state of each such system to be the completely mixed 
state 1/2, and our quantum RF will be used to measure 
many such independent spin-1/2 systems sequentially. 
We shall assume trivial dynamics between measurements, 
and thus our time index will simply be an integer speci- 
fying the number of measurements that have taken place. 
The state of the RF following the nth measurement is de- 
noted p( n ) , with p(°) denoting the initial state of the RF 
prior to any measurement. We consider the state of the 
RF from the perspective of someone who has not kept a 
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record of the outcomes of previous measurements. Thus, 
at every measurement, we average over the possible out- 
comes with their respective weights to obtain the final 
density operator. 

The measurement which optimally determines whether 
a spin-1/2 particle is aligned or anti-aligned to a spin-j 
system was determined in Sec. VI. A. 1 to be the two- 
outcome projective measurement {Tl + = rL, +1 / 2 ,n_ = 
nj-1/2} on Hj £g> Ti.i/2- We use this measurement here. 
It can be shown that of the many ways of implement- 
ing this measurement, the update rule that degrades the 
reference frame the least is the standard Liidcrs update 
rule (Bartlett et al., 2006c). Thus, the resulting evolution 
of the quantum RF as a result of the nth measurement 
is 

P {n+1) =£(p (n) ), (6.12) 
where the superoperator £ is given by 

£(p) = Tr s ( Y, n c (p®//2)n c ) , (6.13) 
ce{+.-} 

with Trg the partial trace over Hi/2- 

The map £ can be written using the operator-sum rep- 
resentation as 

£ (P) = \ E E E «bPKl (6-14) 
ce{+,-} a,be{0,l} 

where E c ah = (a|II c |6) is a Kraus operator on TLj and 
{|0),|1)} is a basis for 7i\/2- These operators can be 
straightforwardly determined in terms of Clebsch-Gordon 
coefficients. 

We quantify the quality of a quantum RF as the aver- 
age probability of a successful estimation of the orienta- 
tion of a fictional "test" spin-1/2 system which is, with 
equal probability, cither aligned or anti-aligned with the 
background +z-axis. Denote the pure state of the test 
spin-1/2 system that is aligned (anti-aligned) with the 
initial RF by |0) (|1)). For a spin-1/2 system prepared 
in the state |0) or |1) with equal probability, the average 
probability of success using a quantum RF state p is 

P s = ^Tr R (p(E++E^)). (6.15) 

The solution for p^ n \ given the initial state p^ = 
b'ij)(j'ij|; yields an average probability of success P s (n) 
that decreases with n as 

F '<">4 + 27Tt( 1 -(2JTTf)"' < 6 ' 16 > 

The initial slope R of this function bounds the rate of 
degradation. It is 

R = P s (l) - P s (0) = -2j/(2j + l) 3 . (6.17) 

Thus, in the large j limit, we have the rate of degradation 
with n satisfying R > — l/(4j 2 ). 



Let e < 1 be a fixed allowed error probability for the 
spin-1/2 direction estimation problem. After n measure- 
ments, the probability of successful estimation is lower 
bounded by 1 + nR, so the number of measurements re- 
quired to ensure that this bound be greater than 1 — e is 
—e/R. Consequently, the number of measurements that 
can be implemented relative to the spin-j RF with prob- 
ability of error less than e is 

"max ^ ej 2 • (6.18) 

This result implies that the number of measurements for 
which an RF is useful, that is, the longevity of an RF, in- 
creases quadratically rather than linearly with the size of 
the RF. Thus, in order to maximize the number of mea- 
surements that can be achieved with a given error thresh- 
old, one should combine all of one's RF resources into a 
single large RF and perform all measurements relative 
to it, rather than use a number of smaller RFs individu- 
ally. We note that this degradation, as quantified by the 
decreasing average probability of success P s (n), can be 
modeled precisely as the distribution of a classical refer- 
ence direction undergoing a random walk (Bartlett et at, 
2006d). 

Using similar methods, it has also been demonstrated 
that a bounded quantum phase reference, realized as a 
single-mode quantum state of the electromagnetic field 
with bounded photon number, also leads to a longevity 
that scales quadratically in this size (mean photon num- 
ber) (Bartlett et al., 2006c). It is an open problem to 
determine if this quadratic scaling is a general result. 

We have discussed the degradation associated with a 
loss of purity of the reference frame state. Another mech- 
anism of degradation is for the reference frame to become 
misaligned with the background reference frame of which 
it is a token. Poulin and Yard (2006) have shown how 
a reference frame can suffer this sort of misalignment 
when the systems being measured have a non-zero po- 
larization (that is, are not described by the completely 
mixed state), and that in the presence of such drift, the 
longevity scales linearly, rather than quadratically, in the 
size of the reference system. 

C. Quantum cryptography with bounded reference frames 

In Sec. IV. D, we demonstrated that SSRs cannot pro- 
vide any fundamental limitations on quantum crypto- 
graphic protocols, essentially because quantum reference 
systems which obey the SSR can enable it to be effec- 
tively lifted. However, this result docs not mean that 
SSRs are uninteresting for cryptography. In quantum 
cryptography, it is typical to focus on unconditional secu- 
rity - security not premised upon assumptions about the 
resources of one's adversaries, but only upon the validity 
of the laws of quantum mechanics. In classical cryptog- 
raphy, in contrast, security is typical conditional - it is 
generally premised upon assumptions about the compu- 
tational capabilities of one's opponents. Other types of 
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conditional security can be premised upon assumptions 
about other non-computational capabilities or resources 
available to the adversarial parties. In this section, we 
consider the specific case where the physical resource 
about which assumptions are being made is some kind of 
RF, the lack of which in turn induces an effective SSR. 
This is effectively an assumption of bounded resources, 
because given unlimited resources the SSR can be lifted 
as in Sec. IV. B. We use the specific examples of data 
hiding and bit commitment to illustrate protocols that 
achieve this sort of security. 23 



1. Data hiding with a superselection rule 

In a quantum data hiding protocol, one party (Charlie) 
wants to share a single bit of data by distributing systems 
amongst two other parties (Alice and Bob) in such a way 
that the bit can only be recovered if the parties have 
some mechanism for performing joint measurements on 
the distributed systems. Such measurements could be 
performed by the parties coming together, or by using 
a quantum channel, or by performing tclcportation (us- 
ing prior entanglement) with a classical channel. These 
possibilities are generally considered equivalent. Thus, 
Charlie must assume that the two parties have no access 
to the specific physical resource of a quantum channel. It 
has been proven that perfect quantum data hiding is not 
possible even with this assumption (Tcrhal et al, 2001). 

If, in addition, Charlie can assume that the two parties 
do not share a phase reference (that is, they are subject 
to a local Abelian SSR) then perfect data hiding can 
be achieved (Verstraete and Cirac, 2003). For example, 
without a shared phase reference for their optical modes 
as in Sec. III.C.l, Alice and Bob cannot distinguish the 
pair of orthogonal pure states |V' ± ) = ( 1 01) ± 1 10))/ \/2 
using LOCC because U A ® U B {\^ + )) = U A ®U B {\i>~)), 
and so this pair of states could be used to encode the 
classical bit. 

As per the discussion in Sec. IV. B, it is also clear that 
shared reference systems could be used by Alice and Bob 
to break such a data hiding protocol. Such reference sys- 
tems need not be entangled, which shows that breaking 
of the data hiding in this case is quite different to the case 
of using entanglement to implement a quantum channel. 
However, if Charlie has reason to believe that the refer- 
ence systems shared by Alice and Bob are bounded in 
size, then it is still possible for him to achieve data hid- 
ing. He does this by using such a large number of systems 
to encode the bit that any bounded shared reference does 
not suffice to extract all the required data. 



We note in passing that a different type of assumption, namely 
that Alice and Bob share partially misaligned reference frames, 
can be used as a kind of guaranteed noisy channel, and, as in 
classical cryptography, such channels can be used for secure two 
party protocols (Harrow et al., 2006). 



2. Ancilla-free bit commitment 

A particularly simple class of bit commitment proto- 
cols (Spekkens and Rudolph, 2001) involve Alice prepar- 
ing one of two orthogonal states |xo,i)> according to 
whether she wishes to commit a bit 6 = 0, 1. Here |xo,i) 
are (generally entangled) states over a "proof" system 
and a "token" system. She sends the token system to 
Bob as her commitment. To unveil the bit, she sends 
Bob the proof system, and he verifies her commitment 
by projecting onto |xo,i)- A simple version of such a 
protocol was discussed in Sec. IV. D above. 

Consider the situation wherein Alice and Bob are con- 
strained such that they cannot make use of a reference 
frame, either shared or local. This constraint enforces the 
protocol to be ancilla free - for instance we do not al- 
low either party to prepare ancillary systems which could 
then act as an effective RF in the manner described in 
Sec. IV. B. It turns out that under such a constraint, ar- 
bitrarily secure bit commitment is possible (DiVinccnzo 
et al, 2004). 

It is illustrative to first consider a case where such a 
restriction does not help. Consider ancilla-free bit com- 
mitment in the case that Alice and Bob lack a phase 
reference. As Alice must prepare the initial states |xo,i), 
they must each lie completely in a single superselection 
sector, i.e., eigenstates of total photon number, and take 
the form 

\Xb) =J2 c n\ N - n )p\ n )r- (6-19) 

n 

Because the reduced density matrices of the token system 
Pb = Ylm l c ra| 2 | n )r( n l are diagonal in the number basis, 
the fact that Bob can only perform measurements diago- 
nal in this basis actually is no restriction on him at all - 
he can cheat (by trying to distinguish these states) just 
as well as he could in an unconstrained protocol. 

Consider now if Alice is cheating, i.e., she attempts 
to commit her bit only after the commitment stage. An 
optimal cheating strategy for Alice is to prepare a state 
Ix) Ixo) + Up <£> It\xi), where the unitary matrix Up 
on the proof system is one which maximizes the overlap 
{xo\Up ® I T \xi) (Spekkens and Rudolph, 2001). If, af- 
ter the commitment stage, she decides to commit 6 = 0, 
then she simply sends the proof system as is. If instead 
she decides to commit 6=1 then she applies U P to the 
proof system before sending it to Bob. The question is 
whether Alice can perform this optimal cheating strat- 
egy despite the SSR. Consider first the unitary Up which 
maximizes (xo\Up ® It\xi)- If U P \N - n) = \A N - n ), 
where \Ai) is a state not necessarily respecting the SSR, 
then (xo|E/>®/t|xi> = E„ I4l 2 (^v-„|W -n). Clearly 
the maximization of this expression will be achieved 
by choosing \An-u) — e z ^ N ~"\N — n), i.e. for a uni- 
tary Up which is diagonal in the number state basis. 
Furthermore the state |x) then takes the generic form 
*}2 n c n \N — n)p\ri)T which respects the SSR. Under the 
assumptions of an ancilla-free SSR protocol, any state 
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prepared by Alice or any unitary operator she applies is 
constrained to be diagonal in the number basis - as we 
have seen, in this case she can still achieve the optimal 
cheating strategy despite such a constraint. 

The Abelian SSR induced by lack of a phase reference 
therefore does not help devise a more secure ancilla-frec 
bit commitment. It can be shown, however, that a dif- 
ferent type of Abelian SSR does lead to arbitrarily se- 
cure ancilla-frce bit commitment. We follow DiVinccnzo 
et al. (2004). Consider a number of spin systems, with a 
local Abelian SSR given as follows: all local operations 
must commute with the total local angular momentum 
operator J 2 . Thus all states and operations must be di- 
agonal in total spin quantum number j. However, they 
can have coherence between the different m eigenvalues 
of J z . This superselection rule is distinct from any that 
we have considered in this review, and does not appear to 
be related to the lack of an appropriate reference frame. 
The key property of this Abelian SSR that will be use- 
ful for ancilla-free bit commitment, and is distinct from 
the other Abelian SSRs we consider, is that the quan- 
tum number j labeling the local superselection sectors is 
non-additive. 

Using the standard \j, m) notation for the uncoupled 
basis, consider the bit commitment protocol which is de- 
fined by the following two states \\b) of total spin j = 1 : 

|X6> = ^|1,1>P|^>T 

+ Tfll, 0)p\4)t + ^|1, -1)p\4)t , (6.20) 

where 

|^) T = f|0,0) T + (-l) b i|l,0) T + ^|2,0) T , (6.21) 

\<t>\)r = {-l) b 4 |1,1>t-||2,1)t, (6.22) 
|^)r = |2,2) r , (6.23) 

We note that, although the proof system is also an eigen- 
state of Jf. with eigenvalue j = 1, the token system is not] 
this is a result of the non-additive nature of this SSR. If 
we look at the reduced density matrices po,i on the to- 
ken system in the uncoupled basis, we see that they are 
block-diagonal (incoherent mixtures) in the eigenspaces 
of J z , with eigenvalues m = 0, 1,2. Within each block, 
the diagonal elements of \4> b m ) (4' b m \ are the same - that 
is, they are indistinguishable by their total spin. Under 
the SSR, Bob is restricted to performing measurements 
which are diagonal in total spin, and so these two states 
are completely indistinguishable. 

In a general bit commitment scenario, indistinguisha- 
bility of the token systems by Bob would imply that Al- 
ice has complete control - that she should be able to 
perfectly change her commitment after the commitment 
stage. However, this is not the case for this example - 
the two states po,i have a non-unit fidelity F (po, p\) < 1. 
Because the fidelity sets a bound (for these type of proto- 
cols) on how well Alice can control the outcome (regard- 
less of any restrictions on her), we see that some security 
against Alice will be possible. 



Generalizations of the above pair of states \xb) can 
be defined for which, as j becomes large, F(pQ,pi) — ► 
0, implying perfect security against Alice (DiVincenzo 
et al, 2004). We believe that a fruitful avenue for future 
research would be to determine if such constraints on 
ancilla-free bit commitment can be achieved using a non- 
Abelian superselection rule of the form discussed in this 
review. 



D. Quantifying bounded shared reference frames 

Much of quantum information theory is concerned with 
tradeoffs in the utilization of various types of fundamen- 
tal resources. The canonical example is quantum t de- 
portation, which demonstrates that one ebit (Bell pair) 
of shared entanglement plus two communicated classi- 
cal bits are equivalent to the communication of a single 
qubit. In this section, we demonstrate that a shared ref- 
erence frame is also a quantifiable resource, akin to en- 
tanglement, which allows parties to perform tasks that 
they were unable to perform without it, or to perform 
tasks more efficiently. 

Consider the "activation" example of Sec. III.C.2, 
which involved two parties (Alice and Bob) who do not 
share the phase reference of a third party (Charlie) or 
each other. In this context, the two- mode single-photon 
state (|1)a|0)b + |0)a|1)s)/\/2 could not be used to per- 
form quantum teleportation or to violate a Bell inequal- 
ity. However, if Alice and Bob were also provided with 
the bipartite state \+)a\+)b, where |+) = (|0) + |l))/\/2 
described relative to Charlie's phase reference, they could 
activate the entanglement in the former state through 
LOCC. Although Alice and Bob do not share Charlie's 
phase reference, clearly the state |+)a|+)b provides a 
bounded version of it. This bounded shared phase ref- 
erence can be used to activate the entanglement of the 
two-mode single-photon state, as can an unbounded clas- 
sical shared phase reference. However, unlike the latter, 
the bounded shared phase reference |+)a|+)b can only 
activate the entanglement with probability 1/2, and in 
addition, is consumed in the process; it is a shared ref- 
erence frame that can be depleted, in this case, through 
a single use. The state |+)a|+)b can be considered an 
elementary unit of Charlie's phase reference, much like 
an ebit (a Bell pair) is considered an elementary unit 
of entanglement. As a result of this analogy, the state 
|+}a|+)b has been denoted a refbit. 

Continuing this example, we note that the two-mode 
single-photon state (|1)a|0)_b + \0)a\^)b)/V^ can also be 
viewed as a resource for "activating" another copy of this 
same state. (This process can alternatively be viewed as 
2-copy entanglement distillation, as in Sec. III.C.2.) This 
state is invariant under global phase changes, and thus 
is completely uncorrelated with Charlie's (or any other 
party's) phase reference, but it nevertheless provides a 
bounded version of a shared phase reference for Alice 
and Bob. It is useful to view this state as the elementary 
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unit of a shared phase reference between Alice and Bob, 
uncorrelated with any other. 

Because of the dual purpose of this state - either as 
as an elementary unit of a shared phase reference, or as 
a state from which entanglement can be activated with 
the use of a shared phase reference - it has been named 
and categorized in many different ways depending on its 
intended use. So which way should it be viewed? The 
answer is that this state can serve as a resource for both 
entanglement and a shared reference frame, and that one 
must trade off its usefulness for one purpose against the 
other. In fact, a wide variety of tradeoffs between refbits, 
ebits, cbits, and other resources can be derived (van Enk, 
2005a, 2006), which emphasizes the utility of thinking of 
reference frames as yet another form of resource. 

Now that we have identified "standard" elementary 
unit(s) of a shared reference frame, we can quantify how 
well a given quantum state serves as a shared reference 
frame by the state's asymptotic interconvertibility to this 
standard form, using local operations and classical com- 
munication. 24 A remarkable property of entanglement 
of pure bipartite states is that, by observing the prop- 
erties of asymptotically reversible transformations using 
LOCC, entanglement can be quantified by a single ad- 
ditive measure: the reversible conversion efficiency to a 
standard form of entanglement, the ebit. For an Abclian 
superselection rule, the resource of a quantum shared 
reference frame can be quantified by a single additive 
measure in a similar fashion. Thus, the nonlocal prop- 
erties of pure bipartite quantum states in the presence 
of an Abelian superselection rule are completely charac- 
terized by two additive measures: the entanglement (for 
which we can use an operational measure such as Essr, 
the entanglement in the presence of a SSR, discussed in 
Sec. III.C.3) and another measure quantifying the state's 
ability to serve as a shared RF. In the following, we in- 
vestigate one such measure for the latter, the superselec- 
tion induced variance (SIV) (Schuch et al, 2004a, b). We 
note that measures for quantifying quantum shared RFs 
in the presence of non- Abelian superselection rules have 
not been explored to date. 

Let Alice and Bob each have in their possession a 
number of optical modes, and consider a situation as in 
Sec. III.C.l where they do not share a phase reference. 
Thus, Alice and Bob are restricted by an Abelian local 
superselection rule for photon number. Let TIa (Hb) be 
the local Hilbert space for Alice's (Bob's) modes, and 
Na (Nb) be the total local photon number operator for 
these modes. Consider a bipartite quantum state \<p) on 
Ha ® Hb that is an eigenstate of total photon number 
Na + Nb- (This condition ensures that the state is not 
correlated with another party's phase reference.) The su- 



For an alternate measure of how well a quantum state can serve 
as a shared reference frame, based on entropic properties, see 
Vaccaro et al. (2005). 



perselection induced variance V(<f>) of this state is defined 
to be the variance in the local photon number 

V(<f>) = 4((<f>\N% ® Ib\4>) ~ {4>\N A ® IbW) ■ (6.24) 

This SIV satisfies the following properties: (1) it is addi- 
tive, meaning V((p®(j)') = V(<j>) + V {<)>') for any \<j>), \<j>')\ 
(2) it is symmetric under exchange of A and B; and (3) 
it is a bipartite monotone, in that it is non-increasing 
under LOCC operations that can be performed by Alice 
and Bob without a shared phase reference. The state 
(|1)a|0)b + |0) j 4|1)b)/v / 2 ) which we identified above as 
an elementary unit of shared phase reference, has an SIV 
ofl. 

Two measures - the entanglement and the SIV - com- 
pletely quantify the nonlocal resources of a bipartite 
state. To prove this result, the general idea is to show 
that Alice and Bob can, through LOCC restricted by 
the superselection rule, reversibly convert an asymptotic 
number of copies of the bipartite state into a number of 
states with only the first type of resource (entanglement) 
and none of the second (SIV), and a number of states 
with only the second and none of the first. Let Alice 
and Bob share N copies of a bipartite state \<p), which 
has entanglement £'ssr(0) and SIV V{<f>). In addition, 
let Alice and Bob each have in their possession an arbi- 
trary number of quantum registers - quantum systems 
that are not restricted by any superselection rule, such 
as were discussed in Sec. III.C.3; these registers are ini- 
tiated in an arbitrary unentangled state |0)|0). Then the 
transformation 

10)®"® (|6)|6»® SssrWV 

-» (X)c„|n)|iV-n)) ®$-)»EbbkWn , ( 6 .25) 

n 

is asymptotically reversible, and Alice and Bob can per- 
form this transformation with LOCC restricted by the 
SSR, where the coefficients c„ are Gaussian-distributed 
with variance NV (</>)/ 4, and \ip~) is a maximally- 
entangled Bell state of a pair of qubits of Alice's and 
Bob's quantum registers. 

Let's analyze the two states on the right side of 
Eq. (6.25). The first state, £„c„|n)|iV - n), has SIV of 
NV((j>). Such a state serves as a good "standard" shared 
RF for large N (Vaccaro et al, 2003). Also, although it is 
a non-separable pure state, the entanglement in the pres- 
ence of a SSR, Essr, of this state is zero. In contrast, the 
state of the unrestricted registers \^p-^ E ssni<t>)N dearly 
contains an amount of entanglement equal to Essr((I>)N 
standard ebits. As this system is a quantum register, and 
not a system with a phase degree of freedom, it clearly 
has no function as a shared phase reference; thus, the SIV 
of this state is zero. The two states on the right side of 
Eq. (6.25), then, represent standard forms for each type 
of nonlocal resource - superselection induced variance, 
and entanglement in the presence of a SSR - and contain 
none of the other type. 
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A proof that the transformation (6.25) is asymptot- 
ically reversible with LOCC restricted by the SSR can 
be found in Schuch et al. (2004a). In their proof, they 
used the entropy of entanglement E rather than Essr] 
we note that in the asymptotic limit for an Abelian SSR, 
E S SR(<j>® N ) -» E((j)® N ) for any pure state \<f>) (Wiseman 
and Vaccaro, 2003). Thus, their proof applies directly 
to the above statement. This result can be extended to 
apply to mixed states (Schuch et al, 2004b). Finally, 
we note that explicit protocols for activation - creating 
states with E SSR using states with Egsn = us- 
ing a quantum shared reference frame state - have been 
developed (Bartlett et al, 2006a; Vaccaro et al, 2003). 



Bob's. If their phase references differ by a phase shift 
0b a, then these two operations are related by Xb = 

e -t0 BA Z/2 XAe +i0 BA Z/2. gee Scc ^ y G Thugj the gtate 

to which they are purifying in this instance is 

(|l>A|0>B + e-^|0) A |l) B )/\/2. (6.27) 

If Alice's and Bob's local phase references are uncorre- 
lated, as we assumed, then 9b a is completely unknown, 
and the protocol does not yield a state with higher fi- 
delity with (|1)a|0) b + \0) a \1)b)/V2. 



E. Purification of bounded shared reference frames? 

As noted in the previous section, the state (|1)a|0)b + 
|0)a|1)b)/v / 2 can be viewed as the elementary unit of a 
shared phase reference between Alice and Bob, uncorre- 
cted with any other. This state has the appearance of 
a maximally-entangled Bell state (see Sec. III.C), and so 
a natural question is to ask whether a number of imper- 
fect (noisy) states can be purified to a smaller number of 
superior states of this form. Of course, for such a pro- 
cess to be of any use, it would need to be implementablc 
without the use of some other, unbounded shared RF. 
An affirmative answer would mean that shared RFs are 
a resource that can be purified, just like entanglement. 
Unfortunately, however, such a task does not appear to 
be possible, as we now demonstrate, following Preskill 
(2000). 

Consider a noisy shared RF state that is a mixture 
of the state (|1)a|0)b + \0) A \l) b) / V% with probability 
p > 1/2 and the state (|1)a|0)b - \0} a \1)b)/V2 with 
probability 1 — p. Let Alice and Bob share two copies of 
this mixed state. With these states, they attempt to per- 
form the following simple entanglement purification pro- 
tocol (Bennett et al, 1996): they each apply a CNOT on 
the two qubits in their possession, and then perform an 
X measurement on the target qubit. Each party obtains 
a measurement outcome ±1, which they communicate 
with each other classically, and compare whether the re- 
sults are the same or different. Effectively, though this 
process, they have measured the joint non-local operator 

(X a Xb)i ■ (X A X B )2 ■ (6.26) 

In the standard entanglement purification protocol, if Al- 
ice and Bob keep only those states where they obtain the 
same measurement results, the resulting states will have 
higher fidelity with the state (|1)a|0) b + \0)a\1)b)/V2. 

Note, however, that this protocol requires operations 
which arc not U(l)-invariant. For example, a mea- 
surement of X must be performed relative to that 
party's local phase reference. Let Alice and Bob make 
use of unbounded local phase references in this proto- 
col. Note that the operator Xa is defined with re- 
spect to Alice's phase reference, and Xb with respect to 



F. Treating bounded reference frames as decoherence 

We conclude this section with a discussion of a promis- 
ing approach to describing the effect of using bounded 
RFs. As demonstrated above, bounded RFs limit one's 
ability to prepare states and to perform quantum opera- 
tions and measurements on a system, and the nature of 
these limitations is similar in many ways to that of de- 
coherence. One is led, then, to ask whether it is possible 
to treat bounded RFs externally rather than internally 
(in the sense of Sec. IV. A. 2) by positing an unavoidable 
decoherence. In other words, if such a description ex- 
isted, then the bounded size of the RF could be said to 
effectively reduce the purity and/or coherence of systems 
described with respect to it. 

While no completely general description of treating 
bounded RFs in this manner has yet been developed, 
specific examples of such decoherence mechanisms and 
their consequences have been discussed in various rela- 
tional approaches to quantum theory (Gambini et al, 
2004a,b; Milburn and Poulin, 2006; Page and Wootters, 
1983; Poulin, 2006). These discussions have primarily fo- 
cusscd on the tricky issue of internalizing time in quan- 
tum theory. Unsurprisingly, given the interpretation of 
certain types of phase references as clocks, these rela- 
tional formulations generally follow along the lines of the 
procedures we have already reviewed. One begins by 
treating all systems which can serve as a clock as inter- 
nal, constructs (pure or mixed) states that are invariant 
under global time shifts, identifies relational spaces in 
the decoherence- free subsystems, re-factorizes the Hilbert 
space in terms of the induced tensor product, and finally 
interprets the new formulation as the 'true' dynamical de- 
scription. As expected, a form of decoherence in this new 
description is found whenever the size of the internalized 
reference system(s) is bounded. It is an interesting open 
problem to identify the appropriate decoherence maps (if 
they exist) that describe the dynamics of a system rela- 
tive to a bounded (particularly non- Abelian) RF. While 
one can debate the appropriateness of these approaches 
from a foundational perspective, such an approach would 
certainly be useful for addressing questions in the field of 
quantum information. 
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VII. OUTLOOK 

The study of reference frames and superselection rules 
in the context of quantum information theory is an unfin- 
ished task. In this section, we provide an overview of the 
topics we have discussed together with some open prob- 
lems and research directions, while outlining the practical 
and foundational significance of this sort of investigation. 

It is useful to divide the practical applications into two 
broad categories corresponding to whether their purpose 
is the manipulation of spcakable information or of un- 
speakable information, that is, corresponding to the na- 
ture of their inputs and outputs. 

The first category contains the standard problems of 
interest in quantum information theory, both those that 
use quantum systems to manipulate classical informa- 
tion, and those whose inputs and outputs are themselves 
quantum information. Even though these ultimately pro- 
cess speakable information (whether classical or quan- 
tum), protocols for such tasks must always encode this 
information using some degree of freedom, which re- 
quires some form of RF. Thus we are led to ask how 
much the absence of a particular RF or of a shared RF 
among separated parties decreases the efficiency of vari- 
ous information-processing tasks, or increases the practi- 
cal difficulty of implementing them. What is the answer 
to such questions in the case where one has an imprecise 
RF or two parties share RFs that are only partially cor- 
related? Such questions have been considered here for a 
variety of tasks, such as quantum and classical communi- 
cation (Sec. III. A), quantum key distribution (Sec. III.B), 
and implementing quantum gates (Sec. VI.B.l). There 
are many more tasks that could be considered. Also, 
most of the communication and cryptographic problems 
considered to date have determined the efficiency only in 
the case where one demands perfect fidelity encoding and 
decoding and perfect security. Furthermore, these sorts 
of questions have been scarcely addressed for the case of 
shared RF that are partially correlated. Finally, although 
there have been a few experiments demonstrating the vi- 
ability of some of these schemes, such as relational encod- 
ings (Sec. III. A. 3), the development of realistic physical 
implementations remains as much a source of experimen- 
tal challenges as any other quantum technology. 

The second category of applications consists of tasks 
that explicitly involve the manipulation of unspeakable 
information, such as clock synchronization or the align- 
ment of Cartesian frames. Quantum considerations be- 
come important to achieve the optimal precision and 
it is the tools of quantum information theory that are 
best suited to a treatment of the problem. We may 
describe the alignment of remote reference frames as 
the communication of unspeakable information, and as 
soon as one starts describing and thinking about such 
tasks in the language of information theory, many new 
tasks suggest themselves. Examples mentioned in this 
review are: dense coding of unspeakable information 
(Sec. V.K), using private shared RFs as a cryptographic 



key (Sec. III.D), the private communication of unspeak- 
able information (Sec. V.J), and secret sharing of un- 
speakable information. Many more analogies of this sort 
could be considered. Indeed, for almost any information- 
theoretic task of interest today, it is interesting to muse 
about possible analogues of it for unspeakable informa- 
tion. (A particularly intriguing question to consider is 
whether there is such an analogue for computation.) On 
the experimental side, the implementation of quantum 
protocols for even the best-studied of these sorts of tasks, 
the alignment of reference frames, has, with the exception 
of phase estimation, only just begun to be investigated. 

As emphasized in the introduction, imposing a restric- 
tion on operations generically leads to the identification 
of a novel resource to overcome this restriction, and we 
are then compelled to develop a theory for how that re- 
source may be manipulated. For instance, under the re- 
striction of LOCC, entanglement becomes a resource, and 
the theory of how this resource can be manipulated - 
the theory of entanglement — has been the subject of a 
significant amount of work in recent years. Others have 
considered the theory of communication under natural 
restrictions such as local operations and public communi- 
cation (Collins and Popescu, 2002) or restrictions to only 
Gaussian quantum-optical states and operations (Eisert 
and Plenio, 2003). A superselection rule (either local and 
global) is another sort of natural restriction, and under 
this restriction, any quantum state that acts as an RF 
becomes a resource. The theory of such resources might 
aptly be called the theory of quantum reference frames 
or the theory of unspeakable quantum information. It en- 
deavors to answer questions such as how this resource is 
depleted with use, transformed from one form to another, 
shared among several parties, etcetera. Such a theory 
has only begun to be developed. The limited results on 
bounded quantum reference frames, described in Sec. VI 
(see also Sec. III.C) are evidence of this. Moreover, in a 
sense there is a family of theories to be developed, be- 
cause we obtain different results depending on the group 
G with which the superselection rule is associated. Many 
investigations to date have applied only to the cases of 
the group U(l) and/or the group SU(2). Ultimately, one 
would like to have a generic theory of unspeakable in- 
formation that applies to any group; in particular, non- 
compact groups (such as the Lorentz or Poincare groups) 
may require more general mathematical tools than those 
discussed here. 

It is worth noting that this research is not necessarily 
driven by applications. In this sense, it is similar to the 
study of entanglement in quantum information theory, 
which although initially motivated by its practical appli- 
cations, has increasingly become an interesting subject in 
its own right. Of course, just as the development of the 
theory of entanglement has led to many unforeseen prac- 
tical dividends, we may expect this of a general theory 
of unspeakable information as well. 

Finally, applying the tools of quantum information the- 
ory to the study of RFs and SSRs can shed light on foun- 
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dational issues in quantum theory. Examples from this 
review include whether there exist axiomatic superselec- 
tion rules and the controversy over the nonlocality of a 
single photon. Another issue which is likely to be clari- 
fied by an analysis in terms of quantum reference frames 
is that of spontaneous symmetry breaking, which is sig- 
nificant both in condensed matter physics and quantum 
field theory and the foundational status of which is no- 
toriously murky. Foundational issues related to particle 
statistics may also benefit from such an analysis. For in- 
stance, an interesting open question is whether the uni- 
valcnce superselection rule, which forbids coherent super- 
positions of bosons and fermions (Giulini, 1996), may be 
lifted by an appropriate reference frame (Dowling et at, 
2006). Because this SSR is not associated with a com- 
pact group, answering this question requires a formalism 
more general than the one presented here. 
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